Conditional A BAA is available on all paid Dialpad accounts, and the main exclusion is free or unpaid accounts, which cannot sign it (verified 2026-10-20). Dialpad does not offer a BAA on free accounts, so the answer for a clinic depends on the plan it buys and on a Company Admin signing the agreement before PHI is handled. See Is it HIPAA compliant? All vendors for other vendor checks.
Short answer
Dialpad offers a BAA on all paid accounts. A Company Admin signs it online in the Admin Portal. Once it is signed, Dialpad states that all its products (Connect, Support, Sell and AI features) can be used for healthcare communications.
Free trial and other unpaid accounts cannot sign the BAA. The BAA is a precondition for handling PHI, not proof of compliance on its own. Configuration, access management and staff policies remain the customer's job.
This page reports Dialpad's published terms. It does not audit Dialpad.
Which plans include a BAA
| Plan | BAA | How it is obtained | Extra cost |
|---|---|---|---|
| Dialpad Connect Standard | Available | Company Admin signs in the Admin Portal | Not published by the vendor |
| Dialpad Connect Pro | Available | Company Admin signs in the Admin Portal | Not published by the vendor |
| Dialpad Connect Enterprise | Available | Company Admin signs in the Admin Portal | Not published by the vendor |
| Dialpad Support | Available | Company Admin signs in the Admin Portal | Not published by the vendor |
| Dialpad Sell | Available | Company Admin signs in the Admin Portal | Not published by the vendor |
| Free / unpaid accounts | Not available | Cannot sign | Not applicable |
How to sign: a Company Admin goes to Admin Portal > choose the office > Privacy and Legal > Business Associate Agreement for HIPAA > Sign and Review > Accept.
Minimum seats for the BAA are not published by the vendor. For pricing context only, Dialpad's pricing page lists Connect Standard from $15 per user per month. Whether any extra cost applies to the BAA is.
What the BAA covers and what it excludes
Covered, once the BAA is signed:
- Business communications (Dialpad Connect)
- Contact center (Dialpad Support)
- Sales dialer (Dialpad Sell)
- AI features
Excluded:
- Free and unpaid accounts cannot sign the BAA.
- The vendor sources checked list no excluded features.
Third-party integrations and other vendors' services are outside what this page can confirm. If a clinic connects Dialpad to a CRM, EHR or automation tool that touches PHI, that connection needs its own review and, where required, its own BAA with that vendor.
Security controls the vendor publishes
| Control | Published status |
|---|---|
| Encryption in transit | Yes |
| Encryption at rest | Yes |
| Audit log | Not published by the vendor |
| Access controls | Not published by the vendor |
| SSO | Yes |
| Data residency | Not published by the vendor |
| SOC 2 | Yes |
| HITRUST | Not published by the vendor |
| ISO 27001 | Yes |
Dialpad describes TLS for data in transit and AES 256-bit encryption at rest with 90-day key rotation. On certifications, Dialpad's own wording is "certified to SOC2 Type 2 and ISO 27001, 27017, and 27018". This page repeats that as a quote and does not restate it as a finding.
How to use Dialpad with PHI
Use this checklist before any patient call, voicemail or recording touches the account:
- Have a Company Admin sign the BAA in the Admin Portal before PHI is handled.
- Confirm the account is a paid plan, not a trial or free account.
- Sign for each relevant office as the Admin Portal flow requires.
- Configure user access, and remove access promptly when staff leave, such as front-desk or billing staff who rotate out.
- Set staff policies and training on what may be said, recorded or texted about patients.
- Review any integrations separately, including whether each needs its own BAA.
Compliance depends on the signed BAA, your configuration and your policies together.
Alternatives with a BAA
These phone and communications vendors are listed in no particular order, and placement never depends on payment. Each is conditional on plan and a signed agreement. See each page for the plan-level BAA wording and sources.
- Google Voice: conditional
- Nextiva: conditional
- RingCentral: conditional
- Vonage Business Communications: conditional
For video meetings specifically, see Is Zoom HIPAA compliant?. Browse all phone systems in HIPAA-compliant software by category.
Sources
- Sign a Business Associate Agreement (BAA) – Dialpad — Help article, checked 2026-10-20. "Online BAA signing is available on all paid Dialpad accounts. Company Admins are the only users who can sign BAAs."
- Sign a Business Associate Agreement (BAA) – Dialpad (steps) — Help article, checked 2026-10-20. "Company Admins on paid Dialpad accounts can sign a HIPAA Business Associate Agreement through the Admin Portal: choose an office, open Privacy and Legal, select Sign and Review, review the agreement, and select Accept."
- Dialpad + HIPAA – Dialpad — Help article, checked 2026-10-20. "Great news, once a Business Associate Agreement (BAA) is signed, all Dialpad products can be used compliantly by healthcare industry customers."
- Dialpad + HIPAA – Dialpad (security) — Help article, checked 2026-10-20. "Dialpad is certified to SOC2 Type 2 and ISO 27001, 27017, and 27018 […] Dialpad utilizes Transport Layer Security (TLS) for data being transferred within the applications. […] Data at rest is encrypted with AES 256-bit ciphers and the encryption keys are managed using Google's encryption management with 90-day key rotations."
- Dialpad Pricing — Pricing page, checked 2026-10-20. "Standard: $15 user/month"
Changes
No changes recorded since first verification on 2026-10-20. See recent changes in vendor HIPAA status.
FAQ
Is Dialpad HIPAA compliant?
Dialpad offers a BAA on all paid accounts (Connect Standard, Pro and Enterprise, plus Support and Sell). Free and unpaid accounts cannot sign one. Whether your use is compliant depends on the signed BAA, your configuration and your policies.
Does Dialpad sign a BAA and who can sign it?
Yes. A Company Admin signs it online: Admin Portal > choose the office > Privacy and Legal > Business Associate Agreement for HIPAA > Sign and Review > Accept.
Can free or trial Dialpad accounts be used with PHI?
No. Free trial and unpaid accounts cannot sign the BAA, so they should not be used with PHI.
Do Dialpad's AI features fall under the BAA?
Dialpad states that once the BAA is signed, all its products, including AI features, can be used for healthcare communications. Check any third-party service connected to those features separately.