Question 1

Is OpenAI HIPAA compliant?

Accepted Answer

OpenAI offers a Business Associate Agreement (BAA) for its API under Enterprise terms, but the latest open source models (GLM 5.2, DeepSeek-V4-Pro, Kimi K2.6/K2.7 Code, Qwen3.7 Plus, MiniMax M3/M2.7, and others) are not available through OpenAI at all. OpenMed Router brings those same open source models under a HIPAA-compliant deployment with a signed BAA.

Question 2

Does AWS Bedrock offer a BAA?

Accepted Answer

Yes - AWS Bedrock can be configured as HIPAA-eligible and offers a BAA. However, Bedrock supports only a limited subset of models (largely Anthropic, Meta, and Amazon), and closed-source model pricing is often around 10x higher than running equivalent open source models. OpenMed Router gives you a wider catalog of the latest open source models at a fraction of the cost.

Question 3

Can I use GLM, DeepSeek, Kimi, Qwen, or MiniMax under HIPAA?

Accepted Answer

Yes. The open source licenses for these models permit commercial use. HIPAA compliance depends on how the model is hosted and whether PHI is protected with a signed BAA, encryption in transit and at rest, and access controls - all of which OpenMed Router provides.

Question 4

Is OpenRouter HIPAA compliant?

Accepted Answer

OpenRouter (the popular inference aggregator) is not positioned as a HIPAA-compliant provider and does not provide a BAA for open source model workloads. Here at OpenMed Router, we follow the same unified-API model as OpenRouter, but add HIPAA-compliant infrastructure and an AI Governance layer for covered entities and their business associates.

Question 5

How is this 10x cheaper than Azure OpenAI or Bedrock?

Accepted Answer

Closed-source frontier models carry large per-token margins. Open source models can be served efficiently on optimized inference infrastructure, and those savings are passed through. You also avoid cloud egress lock-in and minimum commitments. Exact savings depend on the model and volume you select.

Question 6

When can I start using it?

Accepted Answer

We are currently onboarding design partners, with general availability is coming soon! Join the waitlist to be prioritized - we'll reach out with a qualification call and early access.

HIPAA-compliant AI for healthcare

HIPAA compliance for AI & LLM APIs: the 2026 guide

Anthropic Claude for healthcare: BAAs, pricing realities, and the open-source alternative

OpenAI for healthcare: understanding BAAs, compliance pipelines, and the 10x open-source price advantage

Introducing HIPAA-compliant GLM 5.2: frontier-class reasoning for healthcare

Introducing HIPAA-compliant DeepSeek V4 Pro: flagship-tier intelligence for high-stakes healthcare AI

Introducing HIPAA-compliant DeepSeek V4 Flash: top-tier speed at a fraction of the cost

How we evaluate AI models for healthcare (our editorial standards)

What does 'frontier AI' actually mean? A 2026 definition for healthcare teams