HomePricing › HIPAA compliant answering service

HIPAA compliant answering service: the real list

We searched every field of every vendor we track, pricing pages, plan notes, overage terms, evidence quotes, for any mention of HIPAA or a business associate agreement. Out of 21 answering services and AI receptionists, 5 say something. Only 2 attach an actual price, and those two prices are $40 and $2,000 a month, for very different kinds of product. This page names all 5, prices the two that can be priced, and lists what to ask the 16 that stay silent.

Short answer: AnswerConnect is the only vendor with an affordable, named HIPAA add-on price, $40 a month. Vapi prices it too, at $2,000 a month, but that is a developer platform fee, not a small practice's add-on. Retell AI, Abby Connect and Ruby all mention HIPAA without a published price. Everyone else, 16 vendors, says nothing either way, which is not proof of absence, it is an absence of evidence. Verified July 2026.

Before you read another word: nothing on this page is legal or compliance advice, and no vendor's marketing copy makes a service compliant. Compliance is a property of your signed agreement and how you actually use the tool, not a badge on a homepage. Take everything below to your own compliance adviser before a single patient call is routed anywhere.

Which answering services publish anything about HIPAA?

Five, and they split cleanly into two groups: two vendors that name a price, and three that mention HIPAA or a BAA without one.

VendorWhat they publishWhere it livesPriced?
AnswerConnect A named HIPAA add-on that cannot be removed once activated Plan gotcha notes Yes, $40 a month
Vapi SOC 2, HIPAA and data residency named on the Scale tier Plan feature list and overage terms Yes, $2,000 a month
Retell AI A BAA named as part of the Enterprise tier Enterprise plan notes No, custom quote only
Abby Connect HIPAA available on the human track, no further detail Languages field Not published
Ruby A HIPAA-compliant service, named without terms Languages field and our fit summary Not published

Checked against each vendor's own pricing page, July 2026. All 21 vendors we track are on the pricing index.

AnswerConnect: the only affordable, named HIPAA price

AnswerConnect is the one real find on this page. Their own notes say it plainly: Cheapest real per-minute rate among human services, and the first 30 calls under 30 seconds each month are free. Their own PDF contradicts itself on whether Growth carries the $49.99 setup fee, so ask before signing. HIPAA compliance is a $40 a month add-on that cannot be removed once added. Forty dollars a month is a small line item next to a $395 plan, and unlike every other vendor here, AnswerConnect is a live, human-staffed answering service a practice could realistically sign up for this week. The catch is right there in their own wording: it is a one-way switch. Turn it on and it stays on, so confirm exactly what it covers before you add it, not after.

Vapi: the most expensive price, and the least practical for a solo practice

Vapi's Scale tier lists SOC 2, HIPAA, SSO, data residency among its features, and the overage terms are explicit: Speech to text, the language model and the voice are all billed at cost on top, plus your own telephony. Extra concurrent lines cost $10 a month each. HIPAA costs $2,000 a month. That is 50 times AnswerConnect's add-on price, and the reason is the product, not the compliance work. Vapi is a developer voice platform. Someone still has to build the call flow, wire up a model and a voice, and hold the account. It fits a clinic's IT vendor or a health tech company building its own intake line, not a solo practice that wants to sign up and start taking calls this afternoon. We total up what the rest of that build costs on the hidden costs page, and Vapi alternatives if a finished product fits you better.

Retell AI, Abby Connect and Ruby: named, not priced

Three vendors mention HIPAA or a BAA without putting a number on it. Retell AI's Enterprise plan lists dedicated server, SSO, BAA, 24/7 support, with a BAA sitting next to a dedicated server and SSO, a negotiated feature with no published cost. Every other Retell AI tier is pay-as-you-go with no BAA mentioned at all.

Abby Connect's own listing says Spanish included on every human and AI plan; HIPAA available on the human track, which confirms HIPAA exists somewhere on their human plans and tells you nothing about which tier or what it costs. Ruby states Bilingual Spanish included; HIPAA-compliant service available and separately positions itself around HIPAA in general terms, but nowhere on its pricing page is there a BAA offer, a tier, or a price attached to it, the way AnswerConnect and Vapi both publish one. That is a real gap in the evidence, not a claim that Ruby or Abby Connect handle compliance worse than the vendors that do price it. It means two vendors put a number in writing and three, so far, have not.

The 16 that say nothing

Silence is not the same as failure. Most vendors simply do not address HIPAA on a public pricing page, which is normal for a product built mainly for restaurants, contractors and retail. It becomes a real gap the moment a medical, dental or mental health practice starts comparing plans. We checked Smith.ai specifically, since it is a common recommendation for medical offices: it says nothing about HIPAA or a BAA anywhere in its published pricing. Neither do Goodcall, PATLive, Dialzara, or the rest of the field. All 21 vendors, priced and compared on everything we could verify, are on the pricing index.

What to ask before you sign

  1. Will you sign a business associate agreement, and on which plan? Get the plan name in writing. AnswerConnect prices it at $40 a month, Vapi at $2,000, Retell AI ties it to an unpriced Enterprise tier. If a vendor says yes without naming a tier or a price, ask again.
  2. If you turn it on, can you turn it off? AnswerConnect states outright that its HIPAA add-on cannot be removed once added. Assume the same is true elsewhere unless a vendor says otherwise in writing.
  3. Where do call recordings and transcripts live, and for how long? None of the 5 vendors above publish a retention period alongside their HIPAA mention. Ask for a number of days, not a general assurance.
  4. Who else touches the data? Subprocessors, meaning the speech-to-text vendor, the model provider, the voice engine, each need their own agreement or your BAA does not cover the whole call. Platforms built from separate components, like Vapi and Retell AI, have more of these than a single finished product does.
  5. Is the data encrypted at rest and in transit? Not one vendor in our data publishes this on their pricing page. That does not mean the answer is no, it means you have to ask and get it in writing.
  6. What happens after a breach? Notification timelines and responsibilities belong in the BAA itself. If a vendor cannot describe their process in a sentence, that is your answer about how prepared they are.

What a missed patient call is actually worth

Compliance is the gate. Whether the service is worth paying for at all is a separate, calculable question. Put your own numbers in before you commit to a premium HIPAA add-on on top of a monthly plan.

Revenue walking out the door
$62,400 per year
that is $5,200 a month

You miss about 10 calls a week, and roughly 3 of those callers would have booked.

The two vendors that actually put a number on it

AnswerConnect at $40 a month is the practical, sign-up-today option, and it is the only one priced like an add-on rather than an enterprise contract. Vapi at $2,000 a month is the developer route if you already have a team to build on it. Get the BAA in writing before either one touches a patient call.

Check AnswerConnect pricing Check Vapi pricing

AnswerConnect is an affiliate link. Vapi is not, and is named because it is the only other vendor that publishes a HIPAA price.

Where to go next

Frequently asked questions

Is [vendor] a HIPAA compliant answering service?

That is the wrong question to ask a comparison page, and it is the wrong question to ask most vendors too. Compliance describes your signed arrangement with a company, not a feature their software either has or does not have. The question with a usable answer is narrower: will they sign a business associate agreement, on which plan, and what does it cost. Of the 21 services in our data, 5 say anything about HIPAA or a BAA at all, and only 2 of those attach a price to it.

How many answering services actually publish HIPAA or BAA terms?

5, out of 21 we track. AnswerConnect and Vapi both publish a price. Retell AI places a BAA inside an unpriced Enterprise tier, Abby Connect says HIPAA is available on its human track with no further detail, and Ruby states it has a HIPAA-compliant service without publishing terms. We specifically checked Smith.ai, commonly recommended for medical offices: it says nothing about HIPAA or a BAA on its pricing page as of July 2026.

Does HIPAA compliance cost extra on an answering service?

Where a price exists, yes, and the two published prices are nowhere near each other. AnswerConnect charges $40 a month as a named add-on, and says plainly that it cannot be removed once you turn it on. Vapi charges $2,000 a month, about 50 times as much, on a developer platform aimed at a completely different buyer. The gap says more about the two products than about what HIPAA itself should cost.

What should I ask a vendor that publishes nothing about HIPAA?

Ask for a business associate agreement by name, in writing, before you say anything else about the account. A homepage badge is not an agreement and a sales call promise is not a contract. Ask where call recordings and transcripts are stored, for how long, and who else, meaning which subprocessors, can access them. If a vendor cannot answer in writing within a day, that is itself the answer. The full list of questions is below.

Compare prices Calculator