Business Associate Agreement (BAA)
BAA Available Upon Request
AI Accident Pilot is fully HIPAA compliant. A Business Associate Agreement (BAA) is available for all users after their free case. This agreement ensures that your patient data (PHI) is protected in accordance with HIPAA regulations.
- 🔒 BAA Required: All users must sign a BAA before processing any Protected Health Information (PHI)
- 📋 Free Case: You can try the platform with one free case. After that, BAA must be signed
- 📄 How to Sign: Contact us at leads@accidentpilot.com to request and sign the BAA
- 🤝 Mutual Commitment: BAA ensures both parties comply with HIPAA Security and Privacy Rules
Your Data is Protected: We never share, sell, or misuse your patient data. All PHI is encrypted and handled with the highest security standards.
Infrastructure & Vendors
AI Accident Pilot uses industry-leading infrastructure providers to ensure security, reliability, and compliance:
🟢
DigitalOcean
Cloud Hosting
HIPAA Eligible
🤖
Together AI
AI Processing
Encrypted
💳
Stripe
Payment Processing
PCI Compliant
📧
Brevo
Email Notifications
⚠️ Replacing
We use DigitalOcean Spaces for secure file storage, and all AI processing occurs in isolated, encrypted environments. Brevo is currently being replaced with a HIPAA-compliant email provider.
Information We Collect
Account Information
- Name and Contact Details — Full name, email, phone
- Professional Information — Law firm, state, bar number
- Account Credentials — Securely hashed password
- Billing Information — Processed securely through Stripe
Case Data (PHI)
- Medical Records — PDFs, DOCX, images uploaded by you
- Case Details — Client information, injury type, dates
- Financial Data — Medical bills, lost wages, settlement amounts
AI Usage Data
- AI Prompts — Input text for AI processing
- AI Outputs — Generated chronologies, demand letters, settlements
- Usage Patterns — How you interact with our AI features
How We Use Your Information
- Generate AI-powered legal documents
- Manage your cases and medical records securely
- Process payments and manage subscriptions
- Provide customer support
AI Data Promise: Your case data is used exclusively for your benefit. We do not use your sensitive legal data to train models without explicit consent. All AI processing occurs in isolated, secure environments and is never stored in AI logs.
Data Security (HIPAA Compliant)
- Encryption: AES-256 for data at rest, TLS 1.3 for data in transit
- Access Control: Multi-tenant isolation ensures your data is private
- Authentication: Secure login with bcrypt password hashing
- CSRF Protection: Tokens on all forms
- Prepared Statements: SQL injection protection
- Audit Logs: Every access to PHI is logged and monitored
Data Breach Notification: In the unlikely event of a data breach, we will notify affected users within 60 days as required by HIPAA regulations.
Your Rights
- Right to Access — Request a copy of your data
- Right to Correct — Update inaccurate information
- Right to Delete — Request permanent deletion of your account
- Right to Export — Download your data in CSV/JSON format
- Right to BAA — Request a Business Associate Agreement
To exercise these rights, contact us at leads@accidentpilot.com
Contact Us
Last Updated: August 10, 2026
Version 1.1 — HIPAA Compliant
BAA Available