Can I Use NoPajamaTime With Patient Data?
The current service is restricted to de-identified or fictional data. Do not submit identifiable patient information unless NoPajamaTime later gives written confirmation that the full required contract chain is in place.
Current Data Restriction
NoPajamaTime may be used only with de-identified or fictional data at this time. It is not approved for identifiable patient information.
Do not submit identifiable patient information unless NoPajamaTime later gives written confirmation that the full required contract chain is in place.
What HIPAA May Require From a Vendor
Before using any vendor with identifiable patient information, physicians should determine whether these requirements apply:
Business Associate Agreement
HIPAA may require a signed BAA before a covered entity uses a vendor with protected health information.
Audio data retention policy
How long are encounter recordings stored? Are they deleted after note generation, or retained?
Model training data policy
Is your encounter data used to train or improve the AI? Under what terms?
Encryption specifics
Audio in transit and at rest — encryption standards matter.
Subprocessor coverage
Which third-party services handle the audio or text? Are they all under BAAs?
The Bottom Line
NoPajamaTime is currently for de-identified or fictional data only and no BAA is currently offered. Do not submit identifiable patient information unless NoPajamaTime later gives written confirmation that the full required contract chain is in place.
Try a de-identified example.
Use fictional or de-identified data only. No BAA is currently offered.