BAAs, redaction, retention windows, on-call paging, and the exact 14 controls a healthcare voice agent needs to survive a HIPAA audit.
Healthcare voice agents are catching up to retail, but the compliance work is the part everyone underestimates. The hard part is the 14 specific controls that show up in an OCR audit. The stack we actually use Below is the production stack we ship for this category. This one ships in 72 hours and survives a real-world Monday morning. Pipecat for voice, a thin Express service for chat, deployed on Fly.io or Render.
This one ships in 72 hours and survives a real-world Monday morning. Pipecat for voice, a thin Express service for chat, deployed on Fly.io or Render. We avoid Vercel for anything stateful. Default to Claude 3.7 Haiku for the chat layer and Claude 3.7 Sonnet for the planning and tool-use steps. Fall back to GPT-4.1-mini when Anthropic has capacity pressure.
BAAs, redaction, retention windows, on-call paging, and the exact 14 controls a healthcare voice agent needs to survive a HIPAA audit. It is filed under AI Voice because that is where operators looking for this problem actually start, and it is written from production work rather than from a content calendar.