Does MiOpsAI store PHI or require a Business Associate Agreement for a family healthcare practice?

No. MiOpsAI does not store, process, or transmit Protected Health Information (PHI), and we do not sign Business Associate Agreements. Your EHR remains the only system of record for anything covered by HIPAA.

MiOpsAI sits alongside your clinical stack and handles the operational layer that lives outside the chart: intake questions, referral coordination emails, scheduling requests, new-patient forms, billing follow-up notes, vendor coordination, marketing responses, and internal team messaging. When a patient conversation touches clinical detail, LizziAI is trained to redirect the thread into your EHR or patient portal rather than continue it on our side.

Practically, this means we ask patients to describe symptoms inside your EHR's secure portal, not in email to your front desk. We store the fact that a patient reached out, the routing decision, and the operational follow-up. We do not store their diagnosis, medication list, lab results, or treatment plan.

Your existing EHR and BAA-holding vendors (charting, e-prescribing, lab, imaging, billing clearinghouse) continue to do what they do today. MiOpsAI replaces the operational tools around them: shared inboxes, spreadsheets, project trackers, marketing platforms, and the ad-hoc messaging apps your team uses to run the practice. Every tenant is isolated with per-tenant AES-256 encryption, and only your practice can see your operational data.

If your workflow requires PHI to flow through operational tools today, we help you redesign the intake and follow-up flows so PHI stays inside your EHR while the operational coordination happens in MiOpsAI. See LizziAI capabilities and the security and compliance FAQs for the full boundary.