I can see the option to turn on HIPPA Compliance for an agent but I want to confirm - does hippa compliance only apply for voice agents? what about a chat bot? If I for example embed a widget with chat capabilites on my website then is that hippa compliant?

Based on the documentation I have found, HIPAA compliance in Vapi is specifically tied to the

/call

endpoint and the voice pipeline. There is no explicit confirmation that chat widgets or chat bots are HIPAA-compliant. For handling PHI, you should only use the

/call

endpoint with

hipaaEnabled

set to `true`:

json
{
  "hipaaEnabled": true
}

If you need HIPAA compliance for chat widgets, please contact Vapi support for clarification before embedding PHI in chat interactions. (According to the documentation: https://docs.vapi.ai/security-and-privacy/hipaa) Source: - [HIPAA Compliance Vapi Documentation](https://docs.vapi.ai/security-and-privacy/hipaa)