AI set up for HIPAA
With HIPAA on, Littlebird uses only the AI providers it has set up for HIPAA accounts, and web search moves with them.
Diagram: with HIPAA on, your chat goes to Provider A and Provider B, and Provider C is not used.
Use Littlebird with patient information under a BAA
Accept the agreement in three steps in the app. Then Littlebird writes your session notes and drafts the paperwork around them
Today
- 9:00 AMTelehealth sessionNote written in your SOAP format
- 11:00 AMIntake in the roomNotes from your laptop, follow-ups listed
- 12:30 PMBetween sessionsThis morning’s referral, summarized
- 3:00 PMPaperworkReply to the referring clinician, drafted
- 5:00 PMEnd of dayWhat you promised clients today, in one list
- SOC 2 Type II compliant
- Mac, Windows and web
- Hosted in the United States
Enable HIPAA in three steps
Accept the BAA before any patient information reaches Littlebird
Sign in on your computer
Use the Mac or Windows app, or Littlebird on the web.
Open Data Controls
Open Settings, then Data Controls, and find Enable HIPAA.
Accept the BAA
Choose View and accept, read the agreement, type your legal name and choose I agree.
Example: Littlebird’s Settings window open on Data Controls. Under Compliance, Enable HIPAA reads: Signed by Jordan Hayes on Oct 23, 2026. Privacy mode is enforced for your account. A View agreement button sits beside it.
- A copy of the agreement arrives by email.
- Once you accept, HIPAA stays on for your account. To change it later, contact Littlebird.
- On a team plan, your admin turns on HIPAA for everyone.
- Summary and prep emails stay on until you turn them off in Settings, Meetings.
What changes when HIPAA is on
The app calls it privacy mode, and it starts the moment you accept
Share links off
Share links and team sharing turn off, so each person’s notes stay their own.
Left out of quality reviews
Your account is left out of Littlebird’s internal quality reviews.
Hosted in the US
Littlebird is hosted on AWS in the United States. Your data is encrypted in transit and at rest, and never sold.
Once you accept the BAA in the appOutside HIPAA mode
- Apps you connect, like Gmail or Google Calendar, keep their own terms
- Texting Littlebird, and AI tools you connect through Littlebird MCP
- Summary, prep and routine emails, which you can turn off
Keep patient details out of these.
Session notes in the format you use
No bot joins your telehealth call, and in the room you start a note on your laptop. Littlebird writes the summary your way
- Write your format once, like a SOAP note, in the Meeting Summary setting
- Ask it to leave client names out of summaries, or to skip some sessions
- By default it asks before it takes notes, so get your client’s consent first
Littlebird follows these instructions but can miss, so review every summary before it goes in the chart. Delete a note, and its transcript and summary go with it.
Example: a Littlebird meeting note titled Telehealth session, today at 9:00 AM, with its Summary open. Subjective: Feeling more settled at work; worry before meetings is down this week. Objective: Calm and engaged; completed the weekly mood check. Assessment: Steady progress with the current plan; sleep is still short. Plan: Keep weekly sessions; add a wind-down routine before bed. Action Items: You: Bring the wind-down worksheet next session. You: Book the next session for Thursday.
Find what you read and draft what comes next
Ask about the referral you opened this morning, then have Littlebird draft the reply. You copy it where it goes
Example: a Littlebird chat. You ask: Summarize the referral I read this morning and draft a reply to the referring clinician. Littlebird looked through your context and answers: The referral asks for an assessment and a treatment plan, notes two earlier medication trials and asks for an update within 30 days. Here’s a draft reply: Thank you for the referral. I’ve scheduled an initial assessment for next week and will send you an update on the plan within 30 days. A Copy text button sits under the answer.
- Ask in your own words about anything you read, even weeks later
- Drafts stay in Littlebird until you copy them out, and nothing is sent
- Keep your EHR or any app or website out, or let Littlebird see only the apps you choose
Enable HIPAA for your whole practice
A team admin accepts the BAA once, and it covers everyone on the team, including people who join later
- Admins manage seats and settings but can’t open anyone’s chats, meeting notes or memory
- Keep apps and sites out for everyone, skip chosen calendar meetings and choose not to keep transcripts
- Share links and team sharing stay off while HIPAA is on
- Team plans start at $17 per seat per month, billed annually
Example: Littlebird’s Settings, Team page as an admin sees it, with four members: Avery Cole, Casey Reed, Quinn Foster and Rowan Bennett. Under Compliance, Enable HIPAA reads: Privacy mode is enforced for every team member, with a View agreement button.
Questions clinicians and practices ask
Is Littlebird HIPAA compliant?
Littlebird supports HIPAA once you accept its Business Associate Agreement in the app, or your team admin accepts it for everyone. With HIPAA on, Littlebird uses only the AI providers it has set up for HIPAA accounts, and share links and team sharing are turned off.
Can I read the agreement before I accept?
Yes. In Data Controls, choose View and accept and open the agreement from the dialog. After you accept, a copy arrives by email.
Do I need the BAA?
Yes, before you use Littlebird with patient information. Accepting it turns off share links and team sharing, and it can’t be undone in the app.
Does it work for telehealth and sessions in the room?
Yes. Littlebird takes notes from your computer’s audio, so no bot joins your Zoom, Microsoft Teams or browser call. In the room, start a new note on your laptop. By default it asks before it takes notes, so get your client’s consent first, as your practice’s policy and local law require.
Does Littlebird connect to my EHR?
Littlebird remembers what you see on screen, including your EHR if you allow it, but it doesn’t connect to it or write into it. Copy notes and drafts in yourself, or keep the EHR out.
What sits outside HIPAA mode?
Apps you connect, like Gmail or Google Calendar, keep their own terms, so check your agreements with them before patient details go there. Littlebird MCP and texting Littlebird are outside it too. Summary and prep emails stay on until you turn them off in Settings, Meetings, and each routine has its own email switch.
Who can see my clients’ information?
Admins and teammates can’t open anyone’s chats, meeting notes or memory, and with HIPAA on your account is left out of Littlebird’s internal quality reviews. See the current list of subprocessors in our Trust Center.
Start your next clinic day with Littlebird
Download it and enable HIPAA in the app before your first session
.svg)
