# HIPAA Workspaces

URL: https://www.getdynamiq.ai/hipaa

> Dedicated HIPAA workspaces for healthcare organizations, with a BAA for each customer: how Dynamiq protects PHI and which features are available.

Last updated October 28, 2026.

Dynamiq offers dedicated HIPAA workspaces for healthcare organizations and signs a business associate agreement (BAA) with each HIPAA customer.

## How we protect PHI

-   A dedicated workspace, logically separated from other customers’ workspaces.
-   Hosted in Dynamiq’s AWS environment in the United States.
-   Encrypted with TLS 1.2 or higher in transit and AES-256 at rest.
-   AI processing only through Amazon Bedrock in US regions (Anthropic Claude for generative AI, Cohere for embeddings).
-   Customer data is never used to train AI models.
-   Providers that handle PHI are listed on the [Sub-processors page](https://www.getdynamiq.ai/sub-processors).

## Available in HIPAA workspaces

-   Dynamiq Chat agent: conversations, file uploads, generated files, skills and subagents
-   Custom agents, dashboards and automations built or approved by Dynamiq
-   Conversation history and activity logs
-   Memory across conversations
-   Code execution sandbox, with outbound connections restricted
-   Integrations the customer authorizes in writing (the customer needs its own BAA with that provider)

## Not available in HIPAA workspaces

-   Dynamiq agent in Slack, Microsoft Teams or Telegram
-   Third-party analytics, session recording, tracking pixels and live-chat widgets
-   AI models other than those listed above
-   Web search, web scraping and browser automation
-   Image generation and text-to-speech
-   Third-party app connectors (e.g. Google Drive, Gmail, Notion, Slack) and third-party MCP servers
-   Public sharing links, public apps, chat widgets and unauthenticated endpoints
-   Voice agents and telephony
-   Email, SMS or push messages containing patient data (notifications contain only a link)
-   Knowledge bases, fine-tuning and evaluations

## Customer responsibilities

-   Enter PHI only in a HIPAA workspace, using the features above.
-   Keep PHI out of support emails, tickets and chat with Dynamiq.
-   Give each user their own account and remove access promptly.
-   Have a BAA with the provider of any integration you connect.

## Get started

To set up a HIPAA workspace and sign our BAA, contact [legal@getdynamiq.ai](mailto:legal@getdynamiq.ai).