I’m reaching out on behalf of my client, (a multi-tenant AI voice receptionist SaaS), to confirm details about your HIPAA compliance and phone number provisioning for our project.
1. BAA Coverage for LLM/TTS/STT Providers: If my client signs a Business Associate Agreement (BAA) with Vapi, will it cover all underlying providers (specifically Microsoft Azure OpenAI for LLM, ElevenLabs for TTS, and Deepgram for STT) when these are used exclusively? We need to confirm that no additional BAAs are required with these providers to ensure full HIPAA compliance for PHI processing in our call flows:
2. Phone Number Provisioning with BAA: If we sign a BAA with Vapi, is routing calls through a third-party telephony provider like Twilio still necessary, or does Vapi offer phone numbers directly? If Vapi provides numbers, what is the maximum number of phone numbers allowed per account to support our multi-tenant setup (one number per clinic)?