Is Voksha HIPAA compliant for handling chiropractic patient information?

For Chiropractors

Chiropractic practices are HIPAA-covered entities, so this is a real and applicable question. Every call Voksha handles for a chiropractic office can touch protected health information: medical history, current symptoms, injury details, insurance information, and in PI cases, information tied to an ongoing legal claim. HIPAA compliance, including a signed Business Associate Agreement, is available on Voksha's Enterprise plan. This is specific to Enterprise: Premium and Starter don't include the BAA, which is why practices planning to have the AI receptionist collect real symptom descriptions, medical history, or insurance member IDs need to be on Enterprise rather than a lower tier, regardless of call volume. Every plan is SOC 2 compliant and ISO 27001 compliant, with AES-256 encryption at rest and TLS 1.3 in transit, but a BAA is what HIPAA requires before a vendor handles PHI on your behalf. For a solo practice on Starter or Premium primarily using Voksha for general call handling, the exposure is lower but not zero, since even booking calls often include a reason for visit or symptom description that counts as PHI, so growing practices handling meaningful volumes of new patient intake and PI documentation should plan to move to Enterprise specifically for HIPAA rather than staying on a lower plan purely for call volume reasons. This is also the tier multi-doctor groups and PI-heavy practices should default to, since PI case files often get requested by opposing counsel or insurance adjusters during a claim, and having documented HIPAA-compliant handling of how that information was originally captured strengthens the practice's position. If your practice is affiliated with a hospital system or larger provider group, that parent organization likely already requires vendor HIPAA documentation as part of onboarding any new call-handling tool, which the Enterprise plan is built to satisfy.