HIPPA and ZDR
# support
c
Can someone help me understand for billing if we enable HIPPA and ZDR, dos that only apply for that org for billing or all orgs and I can freely toggle the actual compliance per tenant? Context - running a multi tenant agency, multiple clients in different industries, we want to enable HIPPA and ZDR for a couple, but do we have to pay the monthly fee for each per multi org? All orgs are under our master account, it’s how we deal with multi tenant on VAPI. Apologies if it’s in the wrong place, the documentation is not clear. I would like to think it’s done at master org billing not per tenant otherwise it feels heavy cost for this and not worth it.
v
Thank you for your question! Based on the documentation, HIPAA compliance (with a BAA) is available for $1,000/month and can be enabled at the organization or assistant level. However, it is not explicitly stated whether this fee applies per tenant/org or at the master account level in a multi-tenant setup. There is also no information about "ZDR" billing. Could you clarify if you have already reached out to Vapi support directly about multi-tenant billing for HIPAA/BAA? They may be able to provide a definitive answer for your specific use case. For further details, you can also contact Vapi at [security@vapi.ai](security@vapi.ai) as suggested in the documentation. Let me know if you need help with anything else! Sources: - [Vapi HIPAA Compliance Documentation](https://docs.vapi.ai/security-and-privacy/hipaa) - [Vapi Security and Compliance Google Doc](https://docs.google.com/document/d/1X1UzOVUrma47typ4RnohwConQu9gH26iYz9wpZvDXO0/edit?usp=drivesdk)
s
Hi
compliance add-ons are billed at the subscription level, not per org. So if all your tenants are under one master account, you pay one HIPAA fee ($2,000/mo) and one ZDR fee ($1,000/mo) regardless of how many orgs you have. You can then toggle HIPAA/ZDR on or off per org independently - so only your healthcare clients operate in compliance mode while the rest are unaffected. Quick distinction between the two: HIPAA ($2,000/mo) - full HIPAA-compliant data storage with all platform features ZDR ($1,000/mo) - zero data retention, nothing stored at all
c
Shaunak, thank you so much for answering. I was afraid all the investment in dev was going to be undone.
c
No worries! If you face any issues, feel free to reach out.