Is Doximity HIPAA compliant?
Every member gets a BAA at registration. It covers the tools Doximity marks as secure for patient information, including Ask, Scribe and Dialer.
- Maker
- Doximity, Inc.
- Last checked
- November 11, 2026
- In the index
- Full assessment of Doximity
Plan by plan
A business associate agreement (BAA) is the contract HIPAA requires before a tool handles patient information.
| Plan | BAA available | Detail |
|---|---|---|
| Doximity Ask | Yes | The help center says members can include patient information in prompts. |
| Doximity Scribe | Yes | Doximity says every Scribe user is covered by a BAA. |
| Doximity Dialer | Yes | Patient information sent through the communication tools is handled under the member BAA. |
| Secure messaging and fax | Yes | The privacy policy names member messaging and electronic fax under the member BAA. |
| Enterprise (hospitals and health systems) | Yes | An institutional BAA is part of the enterprise package. |
What that means in practice
The BAA is part of the Doximity Terms of Service. A verified clinician enters it at registration, with nothing extra to sign and no charge. The agreement is posted in full and names Doximity, Inc. as the business associate.
It does not cover everything on the platform. It applies to the tools Doximity identifies as secure for protected health information. Doximity's privacy policy lists its communication tools, AI tools, member messaging and electronic fax.
Hospitals and health systems that buy the enterprise package get an institutional BAA in place of the member agreement.
What the agreement leaves out
Parts of Doximity that are not identified as secure for patient information fall outside the member BAA. The agreement does not list them by name.
How to read this answer
HIPAA has no certificate a product can hold. The part that can be checked is whether the maker signs a business associate agreement, and for which plans.
A signed agreement is where compliant use starts. The practice still has to set the tool up correctly, control who can use it, and train staff.
This page records what Doximity, Inc. documents. It is not legal advice. See the regulatory compliance guide or the HIPAA status of other AI tools.