HIPAA Question
# support
z
Hi, I was playing around with Vapi and was wondering if we can add our dynamic variables from assistantOverrides.variableValues while also having assistant.compliance.hipaaEnabled: true and pciEnabled: true? I tried it, but it's not working. If we can't, can you help me understand what the $1000/month HIPAA compliance offering is provided by Vapi?
v
Yes, you can use dynamic variables from
assistantOverrides.variableValues
even when both
assistant.compliance.hipaaEnabled
and
pciEnabled
are set to true in Vapi. The documentation does not indicate any restrictions on using dynamic variables with these compliance settings enabled. However, if you're experiencing issues, it might be worth double-checking your implementation or reaching out for further assistance. Regarding the $1000/month HIPAA compliance offering, here's what it includes: 1. **Data Protection**: No call logs, recordings, or transcriptions are stored on Vapi's systems, ensuring compliance with HIPAA standards. 2. **Manual Configuration**: You need to manually enable HIPAA compliance by setting
hipaaEnabled
to true. 3. **Privacy Commitment**: This offering demonstrates a commitment to safeguarding sensitive data. 4. **Service Impact**: While it enhances privacy, it restricts access to features like call logs and transcriptions. If you have more specific questions about your implementation or the compliance offering, feel free to ask! ๐Ÿ˜Š Sources: - [Dynamic Variables in Vapi with HIPAA and PCI Compliance](https://docs.vapi.ai/assistants/dynamic-variables) - [Vapi's HIPAA Compliance Offering](https://docs.vapi.ai/security-and-privacy/hipaa) - [Billing FAQ for Vapi](https://docs.vapi.ai/billing/billing-faq)
z
I have a postman body that I'm running and neither my script nor my assistantOverrides.variableValues are being picked up when i set assistant.compliance.hipaaEnabled: true and pciEnabled: true. would the assistantOverrides.variableValues work once I'd purchase the $1000/month HIPAA compliance offering?
m
Yeah it would make sense that since it's now paid, that property is permission based.
we can wait for the team to confirm but that's what I assume is happening
p
Hey @zhay, yes to use HIPAA you need to purchase the add-ons first and then it will be effective.
Thanks @Mason for helping @zhay
z
but how will it be effective? what does the $1000 provide?
how does buying a certificate thru vapi ensure hipaa compliance?
and why is it $1000?
would i need to add the ssistant.compliance.hipaaEnabled: true and pciEnabled: true after i purchase?
and if so, after the purchase, would assistantOverrides.variableValues work? because theyre omitted from the phone call right now with these two ^ in the body
p
> would i need to add the ssistant.compliance.hipaaEnabled: true and pciEnabled: true after i purchase? Yes after purchase you have to enable it. > and if so, after the purchase, would assistantOverrides.variableValues work? because theyre omitted from the phone call right now with these two ^ in the body It will work, and itโ€™s currently set to.
REDACTED
s
@zhay It costs $1k us, which we pass on to you, and regarding HIPAA assurance you can check it over here https://security.vapi.ai
Let me know if you have more questions or require further help.
z
@Sahil postman we just talked about: POST https://api.vapi.ai/call if i set "hipaaEnabled": true, "pciEnabled": true, none of the assistantOverrides.variableValues are registered in the outbound phone call. it just says hello how can i help? when in reality it should follow my script of "Hey {{patientName}}, this is Sarah from {{practiceName}}. I'm calling about your appointment with Dr. {{doctorName}} on {{appointmentDate}} at {{appointmentTime}}. Does that still work for you?" { "name": "Call to Patient", "assistantId": "assistantId", "phoneNumberId": "phoneNumberId", "customer": { "name": "Fake Name", "number": "+1XXXXXXXXXX" }, "type": "outboundPhoneCall", "assistantOverrides": { "variableValues": { "patientName": "Aubrey", "appointmentDate": "March 1st", "appointmentTime": "10am", "doctorName": "Zuko", "practiceName": "Protein, Inc.", "interactionType": "confirmation" } } // ,"assistant": { // "compliancePlan": { // "hipaaEnabled": true, // "pciEnabled": true // } // } }
s
Can you send the assistantID as well?
z
0fb88274-4539-42d3-a757-542cd2833a37
sorry just saw this
any progress @Sahil ?
s
^^ @Shubham Bajaj can you try to reproduce it once?
@zhay can we hop on a quick call and try it out together?
z
@Sahil when
s
sent you calendly link. check dm.
z
set up a call for wed at 1230pm pst
5 Views