HIPAA Workspaces
Last updated October 28, 2026.
Dynamiq offers dedicated HIPAA workspaces for healthcare organizations and signs a business associate agreement (BAA) with each HIPAA customer.
How we protect PHI
- A dedicated workspace, logically separated from other customers’ workspaces.
- Hosted in Dynamiq’s AWS environment in the United States.
- Encrypted with TLS 1.2 or higher in transit and AES-256 at rest.
- AI processing only through Amazon Bedrock in US regions (Anthropic Claude for generative AI, Cohere for embeddings).
- Customer data is never used to train AI models.
- Providers that handle PHI are listed on the Sub-processors page.
Available in HIPAA workspaces
- Dynamiq Chat agent: conversations, file uploads, generated files, skills and subagents
- Custom agents, dashboards and automations built or approved by Dynamiq
- Conversation history and activity logs
- Memory across conversations
- Code execution sandbox, with outbound connections restricted
- Integrations the customer authorizes in writing (the customer needs its own BAA with that provider)
Not available in HIPAA workspaces
- Dynamiq agent in Slack, Microsoft Teams or Telegram
- Third-party analytics, session recording, tracking pixels and live-chat widgets
- AI models other than those listed above
- Web search, web scraping and browser automation
- Image generation and text-to-speech
- Third-party app connectors (e.g. Google Drive, Gmail, Notion, Slack) and third-party MCP servers
- Public sharing links, public apps, chat widgets and unauthenticated endpoints
- Voice agents and telephony
- Email, SMS or push messages containing patient data (notifications contain only a link)
- Knowledge bases, fine-tuning and evaluations
Customer responsibilities
- Enter PHI only in a HIPAA workspace, using the features above.
- Keep PHI out of support emails, tickets and chat with Dynamiq.
- Give each user their own account and remove access promptly.
- Have a BAA with the provider of any integration you connect.
Get started
To set up a HIPAA workspace and sign our BAA, contact legal@getdynamiq.ai.