· cyber security · 4 min read

AI Scribes Are Great. Who Signed the BAA?

Ambient AI scribes can give a doctor back an hour a day — and quietly put a new vendor in every exam room. Here are five questions to ask before you sign, and one thing that never changes no matter how good the tool is.

Ambient AI scribes can give a doctor back an hour a day — and quietly put a new vendor in every exam room. Here are five questions to ask before you sign, and one thing that never changes no matter how good the tool is.

AI Scribes Are Great. Who Signed the BAA?

The demo was impressive.

You talked to a patient the way you normally would. Thirty seconds after the visit, a finished note appeared. Correct structure, correct terms, nothing to type.

For an owner-doctor who finishes charting at 8 p.m., that’s not a gadget. That’s an hour of your life, five days a week.

So it’s worth doing right. Because the day you turn it on, there is a new company listening in every operatory, and the paperwork behind that decision matters as much as the software.

Here are five questions to settle before the first visit gets recorded.

Why scribes are worth the effort

Let’s be clear that this isn’t a post about avoiding AI scribes.

Documentation burden is one of the biggest drains on owner-doctors, and ambient scribes are one of the few AI tools that deliver an obvious, measurable return. Less after-hours charting, more eye contact with patients, more consistent notes.

The point is that a tool this useful will get adopted fast, and fast adoption is where the gaps show up. The questions below are how you get the benefit without inheriting a problem.

Who is in the room now

Before the scribe, a visit involved you, the patient, and maybe an assistant.

After the scribe, the audio goes to the vendor. The vendor may send it to a cloud provider for storage. The transcription and note generation may run on a third company’s models. Each of those is a place your patient’s conversation now lives, at least briefly.

None of that is automatically a problem. All of it needs to be known, agreed to, and documented, because “we didn’t realize a fourth company was involved” is not an answer that holds up.

Five questions before you sign

Ask the vendor, in writing:

  • Will you sign a Business Associate Agreement (BAA), and does it cover your subcontractors too?
  • Is our audio or note content used to train or improve your models? Can we opt out, and is that the default?
  • How long is audio retained, how long are transcripts retained, and who can change that?
  • Where is the data stored, and who at your company can access it?
  • If we cancel, what gets deleted, when, and how do we get confirmation?

A vendor that serves healthcare will have clear answers to all five. Vague answers, or an offer to “look into it,” tell you something too.

The BAA is the first one for a reason. That’s the contract HIPAA expects when a vendor handles protected health information on your behalf. Without it, the rest of the answers don’t matter much.

Your patients are part of this too

Many states expect consent, or at least notice, before a conversation is recorded. Even where it isn’t required, patients notice a device on the counter and wonder.

A one-line script for the front desk and a short sign in the room handle most of this. It also turns the scribe into something you’re open about rather than something a patient discovers.

Build that into the rollout, not the cleanup.

The doctor still signs the note

The scribe produces a draft. It doesn’t produce the record.

Every note still needs your review, your corrections, and your signature. Scribes miss things, hear things wrong, and occasionally write with confidence about something that didn’t happen. That risk is manageable if review is a real step, and dangerous if it becomes a click.

Set the expectation with any associates or providers on day one: read it before you sign it. The time savings are still enormous. They just aren’t 100 percent.

Vet the vendor like you’d vet a lab

You wouldn’t send specimens to a lab because the sales rep was friendly. You’d want to know their accreditation, their turnaround, and what happens when something goes wrong.

An AI scribe deserves the same scrutiny. It’s a clinical vendor with access to the most sensitive conversations in your building.

The good news is that the questions aren’t hard, and a solid vendor will welcome them. The work is asking them before the contract is signed, and keeping the answers somewhere you can find them when an auditor, an insurer, or a patient asks.

We help practices evaluate AI and clinical vendors, get the right agreements in place, and document the decisions so they hold up later. It starts with a 10-minute discovery call.

Call us at 405-253-5101 or schedule a discovery call to get started.

Back to Blog