AI patient and pharmacy support is HIPAA-compliant when the vendor signs a business associate agreement (BAA) before any protected health information (PHI) reaches it, limits each conversation to the minimum necessary PHI, logs what the agent read and did, and verifies who it is talking to before it discusses a prescription. On those tests, the strongest 2026 shortlist is Hyro for health systems, Lorikeet for digital health and pharmacy brands that want a BAA as standard on published plans, and Salesforce Agentforce or Zendesk AI agents for teams already on those platforms. Fin (now part of Salesforce), IrisAgent, Maven AGI and Ada complete the list, each with a different public BAA position.

This guide compares the eight on the questions a patient or pharmacy support leader actually asks: will they sign a BAA, which channels does it cover, what does it cost, and what does it do with a refill, transfer or prior authorization question.

Key takeaways

• No BAA, no PHI. HHS says a covered entity may share PHI with a business associate only after getting "satisfactory assurances, in the form of a contract or other written arrangement" (the BAA).

• BAAs are scoped to named products. Zendesk covers AI agents as a HIPAA-enabled add-on under Advanced Compliance, and Salesforce requires Data Masking for Agentforce. Read the covered-services list, not the badge.

• Verify identity before discussing a prescription. The HIPAA verification standard requires a covered entity to verify the identity and authority of a person requesting PHI when it is not already known.

• Logistics automate well; clinical questions do not. Refill status, delivery and transfer requests suit AI. Side effects, dosing and interactions go to a pharmacist or clinician.

• Published pricing is rare. Of the eight, only Lorikeet, Fin and IrisAgent publish prices.

Which HIPAA-compliant AI for patient and pharmacy support should you shortlist?

Start with Lorikeet if you run support for a digital health, telehealth or online pharmacy brand: its pricing page lists a Business Associate Agreement (incl. HIPAA) as standard on the Start and Scale plans, so the BAA is not held back for an enterprise tier. Hyro is the provider-side option, with a prescriptions product that pulls active prescriptions from the EHR and submits refills. Zendesk lets Suite customers sign a BAA through its Advanced Compliance add-on, which lists AI agents as HIPAA-enabled. Fin says on its HIPAA help article that all Fin workspaces are eligible for a BAA.

How we chose and checked these platforms

We included AI support platforms that patient and pharmacy support teams compare, that publish a HIPAA position, and that answer patient questions across chat, email, voice or SMS. Every vendor fact below was checked on the vendor's own public pages on 28 October 2026 and is linked. Where a vendor does not say whether it signs a BAA, we write "not stated publicly" rather than guess. Order reflects fit for patient and pharmacy support with a clear public BAA position, not overall quality.

Lorikeet publishes this guide and is one of the tools listed. We have tried to describe every product, including our own, using only what each vendor publishes, and we link to the source for each claim.

Not included: symptom checkers, telehealth services and virtual nurse products (such as Buoy Health, K Health, eMed and Sensely), which appeared in earlier versions of this page. They deliver triage or care, not support operations.

Comparison table

1. Hyro: health systems that want refills handled in the EHR

Hyro builds AI agents for hospitals and provider groups and says they are live at 2,500 hospitals, clinics and facilities. Its Prescriptions OnCue product pulls a patient's active prescriptions live from the EHR, narrows the list to the medication the patient describes, and submits the refill or routes a renewal to the right clinician. Its guardrails page lists HIPAA, SOC 2 Type II, CCPA/GDPR and PII redaction, says patient data is processed under strict BAAs with zero-retention terms, and says patients are told when they are speaking with an AI agent. Listed integrations include Epic, Oracle Health, Salesforce, Five9, Cisco and Genesys.

Best for: provider organizations whose volume is phone-heavy scheduling, routing and refill calls.

Limits: its pages are written for health systems, not for subscription telehealth or e-commerce pharmacy support desks. Pricing is not published; buying is demo-led.

2. Lorikeet: digital health and pharmacy brands that want a BAA on published plans

Lorikeet resolves patient tickets across chat, email, voice and SMS from one agent. Its pricing page lists a BAA (incl. HIPAA) as standard on Start and Scale, and its trust page says it is HIPAA compliant, signs BAAs, handles PHI on a minimum-necessary basis, is SOC 2 Type II audited and ISO 27001:2022 certified, and holds zero-data-retention agreements with all model vendors. Data storage is available in the US, Australia or the EU (US on Start and Scale).

Healthtech proof from live stories: Eucalyptus, a digital health provider with clinics across Australia, the UK, Germany and Japan, says patients get a response within 90 seconds, against median first responses that often sat over 20 hours, and that the AI agent's CSAT scores as high as or higher than its human agents. At easykind, the agent escalates to a person when a patient mentions side effects, and email response times fell 92%, from 24 hours to roughly two.

Best for: digital health, telehealth and online pharmacy teams that want to start on a published plan, with written escalation rules for clinical content.

Pricing: Start $2,100/mo and Scale $5,100/mo, paid annually, plus $0.99 or $0.90 per chat, email or SMS resolution and $1.50 or $1.20 per voice resolution (3 minute average). Escalations and unresolved tickets are not charged. 30-day free trial.

Limits: no PCI DSS, so card capture should stay in your own payment flow. The pricing page names helpdesk and telephony connectors rather than EHR or pharmacy system connectors, so confirm that path during scoping.

3. Salesforce Agentforce (Health Cloud): payers and providers already on Salesforce

Salesforce says Health Cloud is HIPAA compliant, and Agentforce for Healthcare adds pre-built AI skills for payers, providers and public health agencies. The Business Associate Addendum page lists Agentforce Service Agent and Agentforce Voice among the services a BAA can cover, on conditions: the signed BAA must name the service, the customer must encrypt PHI it transmits, and for Agentforce the customer must enable Data Masking in the Einstein Trust Layer. The same page says Agentforce Contact Center may not be used as a substitute for medical advice or to infer a diagnosis.

Best for: organizations whose patient, member and case data already live in Salesforce.

Limits: coverage is service by service, and the customer carries configuration duties, including any third-party LLM it connects. We did not compare Agentforce pricing; quote the editions you need.

4. Zendesk AI agents: teams on Zendesk Suite

Zendesk's Advanced Compliance lets Suite Professional, Enterprise or Enterprise Plus customers sign a BAA for accounts that may store PHI. Covered services include Support, Guide, Chat and messaging, Explore and Talk (excluding Text), and Zendesk lists AI Agents (Advanced) as a HIPAA-enabled add-on.

Best for: patient or pharmacy queues already running in Zendesk that want AI agents without a second vendor.

Limits: Early Access Programs and Marketplace apps are not covered and should not be used with PHI, Talk's Text is excluded, and Contact Center customers must also sign a BAA with AWS. Add-on pricing is not on the help article.

5. Fin: Intercom teams that want per-outcome pricing

Fin's help centre says Fin becomes a business associate of eligible customers through a BAA, that customers with HIPAA obligations must sign one before sending ePHI, and that all Fin workspaces are eligible. Its trust page lists SOC 2 Type II, ISO 27001, ISO 27701, ISO 42001 and HIPAA, with data hosted in the US, EU or Australia. Pricing is $0.99 per outcome.

Best for: digital health teams already on Intercom.

Limits: Fin is a general-purpose agent, and the pages we checked do not describe pharmacy or EHR workflows. Its help article says Fin "is not itself seeking to become HIPAA compliant" but helps customers stay compliant.

6. IrisAgent: smaller teams that want a free plan

IrisAgent's healthcare page advertises a signed BAA and SOC 2 Type II, with encryption, role-based access and audit logging, and lists eligibility, billing, scheduling, coverage and refill questions as targets. It covers web chat, messaging and email, voice on existing telephony, and an opted-in SMS overlay, and connects to Zendesk, Salesforce, Intercom and HubSpot. A self-hosted deployment is offered on Enterprise.

Best for: small and mid-market patient support teams that want to start on a free plan and add voice later.

Pricing: Free at $0/mo, Standard from $500/mo, Enterprise custom.

Limits: it serves many industries, its 60%+ resolution figure is its own claim, and the pricing page does not say which plans include the BAA.

7. Maven AGI: large organizations across many channels

Maven AGI's own healthcare buying guide lists it with HIPAA/HITECH independently assessed and BAA availability. Its trust page lists ISO 27001:2022, ISO 42001, PCI DSS 4.0 Level 1 and SOC 2 Type II. It runs one reasoning engine across chat, email, voice, web, SMS and WhatsApp, with real-time redaction and multi-step actions such as eligibility checks and record updates.

Best for: large healthcare organizations that want an agent layered over existing systems rather than a helpdesk migration, which Maven says its overlay design supports.

Limits: enterprise pricing only, with no published price or trial; the pages we checked do not describe pharmacy workflows.

8. Ada: health insurers and member services

Ada's health insurance page says Ada is HIPAA compliant, keeps zero data retention with all LLM providers, redacts PHI automatically, and serves members in 60 languages across voice, messaging, SMS and email. Its trust center lists HIPAA, SOC 2 and GDPR.

Best for: health plans answering member questions about ID cards, coverage and claims, with handoff to a specialist for issues such as a denied prior authorization.

Limits: the pages we checked do not state whether Ada signs a BAA, and its healthcare page is written for health plan members rather than pharmacy fulfilment. Pricing is not published.

What makes AI patient support HIPAA-compliant?

A vendor whose AI agent creates, receives, maintains or transmits PHI for a covered entity is a business associate, and HHS says any subcontractor doing the same for that vendor is one too, per its business associate FAQ. That makes the model provider part of the question. Check five things:

• A signed BAA that names the AI product you will use, plus subprocessor terms for inference.

• Minimum necessary access. HHS says covered entities must take reasonable steps to limit PHI use to the minimum necessary for the purpose.

• An action-level audit trail: every lookup, refill request and handoff tied to a conversation.

• Residency and retention: where PHI is stored, and whether inference providers keep it.

• Escalation rules that send clinical content to people.

For a deeper BAA checklist, see our guide to AI support platforms that sign BAAs and our comparison of SOC 2 and HIPAA compliant AI support.

How should AI handle pharmacy and prescription support questions?

AI should handle prescription logistics (refill and delivery status, transfer requests, prior authorization status) after it has verified who it is talking to, and hand anything clinical to a pharmacist.

• Verify identity first. The HIPAA verification standard (45 CFR 164.514(h)) requires a covered entity to verify the identity and authority of a person requesting PHI if they are not known. In practice, require a logged-in session or matched identifiers before naming a medication.

• Refill and delivery status. Good automation targets: a read of order, fill and shipping status. Confirm the one prescription asked about rather than listing everything on file.

• Transfers. A DEA rule effective 28 August 2023 lets a patient ask for an electronic Schedule II to V prescription to be transferred between DEA-registered retail pharmacies for initial filling, on a one-time basis. AI can take the request and collect details; the pharmacy completes and documents the transfer.

• Prior authorization status. The CMS prior authorization rule (CMS-0057-F) requires impacted payers to send decisions within 72 hours for urgent requests and seven calendar days for standard ones, but CMS says the rule does not apply to drug prior authorizations. Report the status the payer or PBM shows; do not promise a date.

• Hand to a pharmacist for side effects, dosing, interactions, missed doses and substitutions. easykind's agent escalates as soon as a patient mentions side effects.

Online pharmacies can also point patients to FDA's BeSafeRx resources on recognizing safe online pharmacies.

What else can AI resolve end to end in patient support?

• Booking, rescheduling and cancelling appointments with write-back to the scheduling system.

• Billing, payment and subscription questions, with refunds through the payment processor.

• Coverage and eligibility questions; see AI for eligibility and benefits questions.

• After-hours messages; see after-hours patient messaging over EHR and SMS.

What still needs a human?

Clinical judgement, crisis disclosures, complaints that may be reportable, and compliance sign-off stay with people. The AI's job is to recognise these, stop, and hand over with context, so test escalation scenarios before launch. Write regulatory rules into the agent as well: easykind's agent never mentions a product by name, one of the compliance rules its team set to meet Australian requirements.

Questions to ask before you pick

• Will you sign a BAA on our plan, and does it name the AI agent and voice product?

• Which inference providers touch PHI, and under what retention terms?

• How does the agent verify identity before discussing a prescription?

• Show us an action-level log from a refill or transfer request.

• What exactly triggers a handoff to a pharmacist or clinician?

• Where is PHI stored, and can we choose the region?

If you run patient or pharmacy support for a digital health brand, you can test Lorikeet on your own tickets with a 30-day free trial.