HIPAA · PHIPA · GDPR — built in, not bolted on
Claude is where you learned to build.Chipp is where your builds go to work.
Chipp is a HIPAA-compliant AI agent builder because your business demands AI you own.
You've already shipped the scheduler, the intake bot, the lab-report reader. They just have nowhere safe to live — no compliance, no brand, no way to hand them to your team. Chipp gives your builds a HIPAA-compliant home, so real patient work can finally run on them.
Signed BAA · Zero data retention · Your builds migrate over clean
The straight version: what a BAA actually covers, why consumer tiers fail, and what compliant looks like when it's a setting instead of a project.
- Signed BAA
- Zero Data Retention
- HIPAA
- PHIPA
- GDPR
- SOC 2
- Every model, your pick.
The wall every builder hits
You know how to build. The problem is where it lives.
You didn't get stuck on the build. You got stuck the moment it touched a real patient — because the tools you built in were never made to hold PHI, carry your brand, or run for a team.
No safe place to run
A brilliant intake agent is useless the second it can't legally touch a chart. Consumer tiers don't sign BAAs — so the build stays a demo.
No way to share it
You don't want fifteen providers each buying their own AI subscription, and you can't see what any of them actually ask. There's no workspace, just seats.
No guarantee it survives
Models change under you. Accounts get suspended overnight. The build you depend on can quietly break — and it was never really yours to begin with.
You asked. Here are the straight answers.
Eight questions every clinic-builder asks — answered without the pitch.
These are the real ones from the room. No hand-waving, no ‘it depends.’ If we don't know your exact stack, we'll tell you that too — and go find out.
Where should I build so I don't have to rebuild in three months?The quiet question under all the others
Build where PHI was part of the design from day one — not taped on after. And nothing you made in Claude is wasted: your docs, prompts, and skills move over clean.
Claude is where you learned to build. Chipp is where your builds go to work.
Does a Claude Enterprise seat count as a HIPAA workaround?On Hathr.ai, enterprise seats, and BAAs
We won't knock anyone — just run the test. A BAA covers the pipe, not the product. An enterprise seat gives one person a compliant chat window. It doesn't give your staff a branded tool, it doesn't show you the conversations, and you don't get to pick the model.
A BAA makes a tool safe to use. It doesn't give your team a system to run on.
Are consumer tiers of Notion or NotebookLM compliant enough for our SOPs?Trust your gut here
Consumer tiers of general tools don't sign BAAs — full stop. On Chipp, you flip HIPAA on and the agent only runs on compliant models, on top of SOC 2 and GDPR, with encrypted chats and zero retention when you need it.
HIPAA here is a setting, not a project.
I don't want every provider needing their own subscription.The whole-team question
One workspace. Your whole team gets branded agents. Nobody's managing fifteen AI accounts — and you see every conversation, so you know what your people actually ask and where the agent needs work.
Stop renting seats. One workspace, your whole team, your name on the door.
My EMR is closed to AI — Jane, ChiroTouch, Nextech. Now what?The most expensive dead end in the room
There's a ladder: an MCP connection if your tool has one, a per-user login if it doesn't, browser automation if there's nothing at all — never a shared master login. And if we don't know your exact system yet, we'll say so and go confirm it. We won't guess with your patients' data.
Your EMR doesn't have to open up. Chipp sits on top and becomes the easy way to talk to all of it.
How do we get PHI off transcripts without reviewing every one by hand?Research scrubbing and marketing scrubbing aren't the same job
Sanitizer agents sit in the pipeline, chats are encrypted, and zero retention is there when compliance truly demands it. We'll be honest about the trade-off: zero retention means no history, which means the agent can't learn from it — so only pay that price where you have to.
De-identify by design, not by intern.
Can AI prep superbills, track refills, pre-chart, and answer missed calls?Yes — to all of it
These are standard concierge-plus-sub-agent builds, and they deploy to text, WhatsApp, email, Slack, or a bubble on your website — all run from one place. Intake happens once. Nobody re-types their information.
One front door, specialists behind it. The way a good clinic already works.
Why doesn't 'affordable' exist in this category?The most-felt question of all
It does now: $299/mo, with HIPAA included. Stack that against what you're actually quoted — six-figure custom builds, paying double for half a white-label product, or one front-desk salary. Then run it next to what you're doing now for 60 days and compare.
This costs less than the workaround you're already paying for.
What your team runs on day one
The builds you already sketched — living where they belong.
One concierge out front, specialists behind it. Bring what you built in Claude, or start from these. Every one deploys to wherever your patients already are.
Intake concierge
One front door. Collects once, routes to the right sub-agent, never re-asks.
Missed-call text-back
Every unanswered call gets an instant, on-brand reply. No lead goes cold.
Superbill prep
Drafts the paperwork so your front desk reviews instead of retypes.
Refill tracker
Watches for refills due and surfaces them before the patient calls.
Pre-charting agent
Turns intake into a clean pre-chart so you start the visit ready.
SOP brain
Your protocols, searchable in plain language for the whole team.
Review responder
On-voice replies to reviews and inbound, drafted for a quick approve.
Role-play trainer
A safe rep for onboarding staff on your exact scripts and standards.
- Text/SMS
- Slack
- Website bubble
- Web link
AI you own
Your build survives here.
You love Claude. So do we — it's where all of this started. But a production clinic can't run on something that changes under it or disappears overnight. Chipp is the place a build stays put.
Bring what you built
Your Claude Projects, custom GPTs, prompts, docs, and skills move over clean. You're not starting from a blank page — you're giving the work a real home.
You pick the model
When a provider swaps a model, your workflows don't quietly break. You choose the model, and it keeps behaving the way you tested it.
Your name on the door
Every agent carries your practice's brand, not ours. The right patients arrive already understanding how you work.
Owned, not rented
Your data, your workflows, your patients' trust — yours. A signed BAA, zero retention where you need it, and a system that's actually yours to keep.
“Systems that work without me in them.”
the goal, in one line. That's what a build that survives buys you back: your time.
What the day actually looks like
A Day in the Life of an AI Clinic
Not a different clinic — the same one, with an AI team quietly doing the parts that used to depend on somebody remembering. Here's a Tuesday.
- 7:00 AMThe Daily Pulse is already waitingProduction, collections, and no-shows are summarized before anyone sits down — nobody assembled that report by hand.
- 7:15 AMGaps get named before the day startsOpen slots on the schedule and overdue patients are surfaced side by side, so the front desk spends the morning filling them instead of finding them.
- 8:30 AMThe phone agent takes the callA patient calls, the appointment gets booked, and their history is already pulled up — nobody puts the caller on hold to go look.
- 9:00 AMThe exam is captured, not recalled laterA Plaud NotePin records the visit while the doctor works, so the conversation itself becomes the record instead of a note written from memory afterward.
- 9:15 AMThe walkout letter writes itselfThat exam conversation, combined with the insurance details on file, becomes a walkout letter automatically — no one drafts it after the patient has already left.
- NoonA quick read on how the day is trackingA short mid-day update, not a mystery that only resolves at closing.
- 3:00 PMA lapsing insurance gets caught earlyCoverage that's about to expire is flagged while there's still time to act on it, instead of surfacing at the next visit.
- 5:00 PMPending starts get a same-day answerPatients waiting on a decision hear back that day, rather than sliding into next week's follow-up pile.
- FridayThe week rolls up on its ownA weekly digest closes the loop — the same categories the Daily Pulse tracked, now seen at a week's scale.
The same seven jobs, run two ways
| Without an AI team | With an AI team | |
|---|---|---|
| Morning numbers | Production, collections, and no-shows get assembled by hand before the day can start. | The Daily Pulse is already waiting at 7:00 AM. |
| Exam documentation | Notes get written from memory after the visit, whenever there's a free minute. | The exam conversation is captured as it happens and becomes the record. |
| AR follow-up | Overdue accounts surface only when someone goes looking for them. | Overdue patients and lapsing coverage get flagged on their own. |
| Lead follow-up | A missed call is a lead that may never get a callback. | The phone agent answers, books, and checks history in the same call. |
| Referral tracking | Referral follow-ups live in someone's memory or a spreadsheet, easy to lose. | Referral follow-ups get the same daily visibility as everything else on the Pulse. |
| Schedule gaps | Open slots are found by scanning the calendar, if anyone has time to scan it. | Gaps and overdue patients are surfaced together first thing, at 7:15 AM. |
| Walkout letters | Drafted after the fact, from whatever the doctor remembers about the visit. | Generated automatically from the exam conversation and the insurance details on file. |
Nothing here runs unattended — the front desk and the doctor stay in control of every booking, letter, and follow-up. The AI team just stops those jobs from depending on somebody's memory.
Three ways in — all fully HIPAA
One compliant platform. Three ways to put it to work.
Every plan includes a signed BAA, HIPAA / PHIPA / GDPR compliance, zero data retention, and access to every model. The only question is how much of the building you want us to do.
Studio Pro
You build it
$299/mo
Self-service. Build it your way, on a compliant foundation — with us a Slack message away.
- Chipp Agents + Chipp Factory
- HIPAA included — not an add-on
- Signed BAA · PHIPA · GDPR · zero data retention
- $100 of usage included
- One workspace, your whole team, your brand
- Every model — you pick, no silent downgrades
- Public Slack support
- White label available for an additional $999/mo
Practice Brain
We build it, you run it
$2,500/mo
Chipp builds your practice brain and trains your team — so you're live without doing the building yourself.
- Everything in Studio Pro, built for you
- Business brain build
- Custom-work scoping
- Three calls to scope, build, and train
- Private Slack channel
- Private Slack with Chipp + priority support through Cody.
- Full feature access including white label
- Dedicated model capacity lane
- Bring your own Google, OpenAI, and Anthropic keys, no platform fee
- AI usage billed separately at standard rates
- Move to Studio Pro at any time
Fractional CTO
We become your engineering team
Starts at$12,500/mo
For practices with custom apps, integrations, architecture, or security and compliance work that goes beyond Practice Brain.
- For custom apps, integrations, and architecture beyond Practice Brain
- Fractional CTO leadership for your team
- Security and compliance work
- Private or dedicated Chipp installs
- Start with Practice Brain to scope it: that $2,500 is credited toward your Fractional CTO engagement
| Studio Pro | Practice Brain | Fractional CTO | |
|---|---|---|---|
| Signed BAA | ✓ | ✓ | ✓ |
| HIPAA/PHIPA/GDPR | ✓ | ✓ | ✓ |
| Zero data retention | ✓ | ✓ | ✓ |
| Access to every model | ✓ | ✓ | ✓ |
| One workspace for your whole team | ✓ | ✓ | Private or dedicated install |
| Usage included | $100 | Pay your own usage | Pay your own usage |
| Support | Public Slack | Private Slack with Chipp + priority support through Cody. | Fractional CTO + priority support |
| Built and trained for you | - | Practice brain, built and trained in 3 calls | ✓ |
| Custom integrations | - | Scoped case by case | Built as part of the engagement |
| Dedicated model capacity lane | - | ✓ | ✓ |
| Bring your own Google, OpenAI, and Anthropic keys, no platform fee | - | ✓ | ✓ |
| White label | +$999/mo add-on | ✓ included | ✓ included |
| Getting started | Your pace | 3 calls to scope, build, and train | Scoped from a Practice Brain engagement |
FAQ
Is it actually HIPAA compliant, or just 'HIPAA-friendly'?
Actually. You get a signed Business Associate Agreement, agents run only on compliant models, chats are encrypted, and zero data retention is available where compliance requires it — on top of SOC 2, PHIPA, and GDPR.
What's a BAA, and do we get one?
A Business Associate Agreement is the contract that makes it legal for a vendor to handle PHI on your behalf. Yes, a signed BAA is included on every plan: Studio Pro, Practice Brain, and Fractional CTO alike.
We're outside the US — does this still apply?
Yes. Compliance covers HIPAA, PHIPA (Canada), and GDPR (Europe) in one setting, so clinics in Ontario, Scotland, and beyond are covered the same way.
What does 'zero data retention' actually mean for us?
Conversations aren't stored or used to train anything. The honest trade-off: with no history, the agent can't learn from past chats — so turn it on where compliance demands it, and leave it off where the learning is worth more.
Our EMR is closed to AI. Does Chipp still connect?
Usually, yes — via the ladder: an MCP connection if your tool supports one, a per-user login if it doesn't, or browser automation if there's nothing at all. Never a shared master login. Tell us your exact stack and we'll confirm rather than guess.
Do we own our data and our builds?
Yes. Your data, your workflows, and your brand are yours to keep. Nothing is locked to us, and your builds carry your name, not ours.
How fast can we be live?
On Studio Pro, as fast as you build: most people import a Claude Project and have something running the same day. On Practice Brain, we scope, build, and train your team across three calls together. A Fractional CTO engagement's timeline is scoped once we know what you're building.
We need a custom app, integration, or architecture work. Where does that fit?
That is Fractional CTO. Start by scoping the work through a Practice Brain engagement ($2,500). If you move forward with Fractional CTO, that $2,500 is credited against the engagement, so you never pay twice to scope the same work.
Run it next to what you're doing now
Give your builds a home.
Import what you made in Claude, flip HIPAA on, and put your whole team on one compliant workspace — with your name on the door. Compare it to your current workaround for 60 days.