How to know HIPAA is enabled for org level via API?

To check if HIPAA is enabled for an assistant (agent) via API, use the following GET request and look for the

compliancePlan.hipaaEnabled

field in the response:

bash
curl -X GET "https://api.vapi.ai/assistant/{assistantId}" \
  -H "Authorization: Bearer <token>"

If

compliancePlan.hipaaEnabled

is

true

, HIPAA is enabled for that assistant. Note: Organization-level HIPAA status is not shown in the found API docs, but a similar approach may apply if an org-level endpoint exists. Sources: - [Vapi Assistants Structured Outputs Documentation](https://docs.vapi.ai/assistants/structured-outputs) - [Vapi API Reference Get Assistant](https://docs.vapi.ai/api-reference/assistants/get?explorer=true)

Message marked as helpful by @Orgil! 🎉

Hi Orgil, To ensure HIPAA compliance using Vapi, you will need to enable the

hipaaEnabled

configuration in your assistant settings. This setting prevents the storage of call logs, recordings, or transcriptions, aligning with HIPAA standards. Here's how you can enable it:

json
{
  "hipaaEnabled": true
}

Additionally, be cautious to only pass protected health information (PHI) through the

/call

endpoint, and avoid storing PHI on Vapi's platform to maintain compliance. You can read more details in the [HIPAA Compliance guide](https://docs.vapi.ai/security-and-privacy/hipaa).