GovernAtlasSubmit your product ↗
Discover platforms/Heidi Health

GOVERNATLAS / PRODUCT DOSSIER

Heidi

Heidi describes a healthcare documentation service that transcribes patient encounters and prepares customizable medical notes. Its posted clinic agreement includes HIPAA and BAA provisions; buyers should confirm the applicable plan, region and contract before sharing PHI.

Explore the product ↗Add to comparison ↗

01 / CONTEXT & SCOPE

Understand the proposition.
Define the boundary.

The decision to make

Start with the service and agreement being offered to your organization. The posted clinic agreement is a useful lead, but its date and scope need reconciling with the current plan and region. Then assess the review steps between an encounter, a draft and the final clinical record.

What this record does not establish

The published clinic agreement describes documentation functions and HIPAA/BAA provisions. This does not show that the dated agreement governs every current plan or region, that a customer has accepted it or that the clinical output has been validated. No universal free-plan BAA eligibility is inferred.

1 current source · 2 published assertions
Source coverage is a research boundary, not a quality score.

02 / YOUR EVALUATION

Turn interest into a useful trial.

Open the evaluation playbook ↗
A

A test worth running

Use a synthetic encounter with two speakers, an uncertain history and an explicit correction. Ask the supplier to show the proposed note format, editing and approval steps. Build a data-flow diagram for the specific service and ask which agreement and subprocessors cover each stage before any patient-data pilot.

GovernAtlas editorial proposal. We have not performed this test.

B

Evidence to bring back

  1. Record the service edition, region, applicable agreement version and authorized customer signer.
  2. Compare the synthetic scenario with the reviewed note and document unresolved errors.
  3. Obtain scoped answers about retention, subprocessors, training use and the exit process.

03 / DOCUMENTED EVIDENCE

Read the claim. Inspect the basis.

Each statement retains its classification and preserved source. A vendor assertion is not an independent test result.

01
vendor asserted

Heidi's posted clinic agreement, dated July 8, 2024, describes a Business Associate Subcontractor Agreement in Annexure A and a HIPAA section addressing the business-associate role. Scope: this published agreement, not a finding that it governs every current plan, region or customer; obtain the applicable contract before PHI use.

Source, dates & preserved provenanceHeidi Health — Clinic agreement — July 8, 2024 ↗

Authority: vendor owned
Observed 2026-11-02 · Reviewed 2026-11-02 · current until 2026-12-02

Artifact SHA-256: 46431f5d745b72e598bd62cd062f6c244cf5fc9af6b7fa59bea6c20ec8ab5ae5

The hash identifies the preserved capture. The live source may have changed.

02
vendor asserted

Heidi's posted clinic agreement describes transcribing patient encounters and preparing customizable medical progress notes with additional support functions. Scope: the documented healthcare workflow; clinical accuracy and safety have not been independently tested by GovernAtlas.

Source, dates & preserved provenanceHeidi Health — Clinic agreement — July 8, 2024 ↗

Authority: vendor owned
Observed 2026-11-02 · Reviewed 2026-11-02 · current until 2026-12-02

Artifact SHA-256: 46431f5d745b72e598bd62cd062f6c244cf5fc9af6b7fa59bea6c20ec8ab5ae5

The hash identifies the preserved capture. The live source may have changed.

Source register

Brand asset provenance

Organization identity asset from its official website; inclusion does not imply endorsement.

Official website ↗ · Original asset ↗

04 / BEFORE YOU COMMIT

Better questions.
A clearer decision.

Resolve these with the provider and your own evaluation team.

01

Which service, plan, region and integrations does the proposed BAA cover?

02

What retention, deletion and model-training terms apply to our exact workflow?

03

Who validates outputs and owns the clinical or operational decision?

Regulatory applicability requires a separate, current determination. Inclusion is not certification.

COMPLIANCE / CLAIMS, SCOPE & GAPS

Start with the requirement.
Inspect the support.

Prepare your vendor review ↗

These labels describe this dossier’s current evidence coverage. A published mention may be a framework mapping, a qualified assertion or a limitation; it is not a compliance finding.

HIPAA

Published mention available

US healthcare privacy & security

Vendor documents BAA availability

The posted clinic agreement dated July 8, 2024 describes an Annexure A BAA. Confirm that this is the agreement governing the proposed plan and region; no universal plan eligibility is inferred.

Read the source-attributed statement

Heidi's posted clinic agreement, dated July 8, 2024, describes a Business Associate Subcontractor Agreement in Annexure A and a HIPAA section addressing the business-associate role. Scope: this published agreement, not a finding that it governs every current plan, region or customer; obtain the applicable contract before PHI use.

vendor asserted

Heidi Health — Clinic agreement — July 8, 2024 ↗

Explore HIPAA evidence ↗

For HIPAA-regulated use, request service-specific BAA eligibility, processing scope and responsibility details. Missing evidence here does not establish noncompliance. Payment cannot alter these evidence labels.

KEEP THE RECORD USEFUL

A dossier should stand up to scrutiny.

Have a source that changes this picture? Submit it for editorial review.

Raise an evidence issue ↗