Back to the registry
Agent passport

BastionGPT - HIPAA-Compliant AI for Healthcare

Bastion Intelligence · Operations & Productivity

SaaSNo attestation published

Certification per Microsoft Marketplace.

HIPAA compliant AIAI medical scribehealthcare AI assistant
Provenance reach3 of 12 layers traced

Evidence tier Source Confirmed · 6 captures on record

User ratingNot rated0 reviews on the listing
Runs onSaaSSaaS
ProvenanceUnknown33% of the provenance layers this product can disclose
Evidence riskHighSign in to see the basis for this band.

What the publisher says

As described on Microsoft Marketplace.

BastionGPT is private, HIPAA-compliant generative AI built for healthcare and mental health professionals. It pairs an AI assistant with an unlimited ambient AI scribe on a healthcare-grade platform that is safe to use with patient information. A signed Business Associate Agreement (BAA) comes with every plan. Since 2023, more than 10,000 healthcare organizations have adopted it, from solo practices to hospitals and health systems.

The AI Assistant works like the general-purpose AI tools you already know such as ChatGPT and Claude, with a dedicated healthcare focus and critical safety guardrails that reduce compliance risk. For each task, it automatically selects among a pool of healthcare optimized GPT, Claude, and Gemini models. Ask it clinical and practice questions, or have it draft documentation, referral letters, appeals, and patient education materials. It also handles sensitive clinical topics that consumer AI platforms often refuse. The Professional plan reads reference documents up to 30 pages; Professional Plus reads multiple documents totaling 1,000+ pages and analyzes images, charts, and spreadsheets.

Show the rest of the publisher’s description (3 more lines)

The AI Scribe captures in-person or telehealth encounters with multi-speaker recognition and unlimited transcription, then writes structured notes in SOAP, DAP, BIRP, or your own custom format. The notes read the way you write.

BastionGPT runs on Microsoft Azure infrastructure that is HITRUST CSF certified and SOC 2 Type II attested, with data residency options in the United States, Canada, and Australia. It supports HIPAA, 42 CFR Part 2, FERPA, PIPEDA, PHIPA, and Australian APP requirements. Data is encrypted with AES-256. It is never used to train AI models and never sold. The platform is independently security tested every year and has had zero reportable breaches of protected health information since launch.

Physicians at Baylor College of Medicine and Texas Children's Hospital validated BastionGPT's documentation accuracy in a peer-reviewed study. In a KLAS Research survey, healthcare executives named it among the best generative AI solutions in use at their organizations. BastionGPT is built by Bastion Intelligence, a healthcare AI company in Dallas, Texas. Plans start at $20 per user per month with a 7-day free trial.

Preview

2 images
BastionGPT - HIPAA-Compliant AI for Healthcare preview 1BastionGPT - HIPAA-Compliant AI for Healthcare preview 2

Agent build and provenance

See the full provenance

The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.

Compliance

Government
  • FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27

Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.

Vendor

External enrichment

CompanyBastion IntelligenceAutomated
HQUnited States of AmericaAutomated

Sources

Marketplace listingmarketplace.microsoft.comSource
Privacy PolicyPrivacy PolicySource

Publisher resources

5 links
Security & Compliancebastiongpt.comSource
Clinical Validationbastiongpt.comSource
Plans & Pricingbastiongpt.comSource
HIPAA Compliant AI for Healthcare: BastionGPTwww.youtube.comSource

Linked repositories

RepositoriesUnknownUnknown

Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.

Pricing
Unknown
Not stated
Delivery
SaaS
https://support.bastiongpt.com/
Open the source listing ↗

Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.