Enterprise HIPAA-Compliant AI: SSO, SCIM Provisioning, and Admin Controls in Hathr.AI
Start with the concession. If you run a large health system that already holds an enterprise contract with OpenAI or Anthropic, and none of your data needs a federal authorization boundary, the frontier vendor's own healthcare tier may be the simpler purchase. Both vendors now sell one. This page covers the organizations that sit outside that picture, and the enterprise features Hathr.AI built for them in 2026.
Hathr.AI is HIPAA-compliant AI that runs Anthropic's Claude models in AWS GovCloud (US) inside a FedRAMP High authorization boundary. For the full background on how that boundary works, start with our guide to private, HIPAA-compliant Claude. This post covers the enterprise layer on top of it.
Key takeaways
- Hathr.AI Enterprise supports SAML 2.0 single sign-on through your identity provider, including Microsoft Entra ID and Google Workspace.
- Hathr.AI Enterprise supports SCIM 2.0 provisioning for users and groups, so your directory creates, updates, and deactivates every account.
- Hathr.AI maps your directory groups to admin and member roles, so access follows the groups IT already maintains.
- Hathr.AI Enterprise admins see seat use, a user list, a sign-in audit log, and usage in one admin panel.
- Every Hathr.AI web app account includes a signed BAA and runs in AWS GovCloud (US) inside a FedRAMP High boundary, from a single $47 seat up to an enterprise deployment.
Start a 7-day free trial to test the product on your own documents, or talk to our team about an enterprise SSO rollout.
Which enterprise AI tools are built for HIPAA compliance?
An enterprise AI tool is built for HIPAA when the vendor signs a Business Associate Agreement, processes PHI inside the environment that agreement covers, and gives your IT team central control of who holds an account and what they did with it. Four categories of product claim the label in 2026, and they differ most on the last two points.
We watch this question arrive from the search side. Between April and September 2026, Google showed hathr.ai for 213 distinct queries about enterprise AI, team access, governance, and audit trails, 13,456 impressions in all. 159 of them were full sentences of the kind people type into AI assistants, such as “our compliance team is reviewing AI support software for a healthcare and insurance environment” and “which platforms help healthcare organizations govern LLM usage while protecting patient data and audit trails?” Those 213 queries earned hathr.ai two clicks, because until this page no Hathr.AI page answered them. The table below is our answer.
Frontier-vendor details come from Anthropic's HIPAA-ready Enterprise plans article (last updated 23 July 2026) and OpenAI's ChatGPT for Healthcare help article, both read on 30 September 2026. Hathr.AI pricing effective August 2026.
Read the fine print on the frontier tiers before you commit. Anthropic states that Claude Team, Pro, and Max plans cannot enable HIPAA, that the Primary Owner turns HIPAA on for an Enterprise organization, and that Cowork is not yet covered under its BAA. OpenAI states that its BAA covers only the products and functionality it lists as eligible, and it excludes memory. Our breakdowns of what Anthropic's BAA covers and what OpenAI's BAA covers go product by product.
In Hathr.AI, HIPAA is the default state of every web app account. Your team has no toggle to find and no feature list to cross-check before someone uploads a chart.
What changed in Hathr.AI for enterprise teams?
In 2026 we added organizations to Hathr.AI. Before, every account stood alone: one person, one login, one subscription. Hathr.AI Enterprise now has five working parts: SAML single sign-on, SCIM provisioning, an organization model with roles, seat-based billing, and an admin panel. The backend work behind the release ran to more than 260 changes in our API service alone.
[INSERT IMAGE before publishing: hathr-sso-scim-access-flow.png from the Webflow Images folder. Alt text: Diagram of Hathr.AI Enterprise access. A Microsoft Entra ID or Google Workspace directory sends SAML 2.0 sign-ins and SCIM 2.0 provisioning to Hathr.AI inside the AWS GovCloud FedRAMP High boundary, and a deactivated employee loses access. Caption: Your directory decides who opens Hathr.AI. Delete this note after inserting.]
Single sign-on through your identity provider
Enterprise users see one Sign in with SSO button. Hathr.AI reads the email domain, routes the user to your organization's SAML 2.0 identity provider, such as Microsoft Entra ID or Google Workspace, and brings them back signed in. We register your identity provider at runtime, so connecting a new organization needs no software release on our side. MFA stays on for every Hathr.AI account, enterprise or individual.
SCIM provisioning for users and groups
Hathr.AI exposes SCIM 2.0 endpoints for users and groups, built to the provisioning flows Microsoft Entra ID and Google Workspace use. Each organization gets its own SCIM token. Your directory creates, updates, and deactivates Hathr.AI accounts. When HR marks an employee as terminated, the same directory action that closes their email closes their Hathr.AI access. Your organization owns the seat. The employee does not.
Roles mapped from your directory groups
Hathr.AI maps the groups in your SAML assertion to Hathr.AI roles at sign-in. Put your compliance and IT staff in the group you map to admin, and they manage the organization. Everyone else signs in as a member. A user who signs in through SSO for the first time joins your organization on the spot, with the role their groups assign.
Managed accounts with no personal billing
A user on a managed Hathr.AI account sees a read-only panel with your organization's name. Personal billing screens and password-change options disappear, because the organization pays and the identity provider holds the password. We keep personal and enterprise billing in separate systems, so a clinician who also keeps a personal Hathr.AI subscription never sees the two mix.
Error messages that keep identity details private
Raw identity-provider errors can expose tenant names, policy names, and configuration details to anyone who reads the screen. Hathr.AI maps every sign-in failure to a stable error code and shows plain, non-technical copy. A user blocked by an enterprise policy reads a clear message and a next step. Your IT team keeps the diagnostic detail.
What can a Hathr.AI Enterprise admin see and control?
A Hathr.AI Enterprise admin sees how many seats are in use, who holds them, every sign-in event, and how much the organization uses Hathr.AI, in one admin panel inside the app. That answers the governance question compliance teams ask us most: who has access, and can you prove it.
[INSERT IMAGE before publishing: hathr-enterprise-admin-panel.png from the Webflow Images folder. Alt text: Illustrative Hathr.AI Enterprise admin panel showing seats in use against the licensed limit, users provisioned by SCIM, an eight-week usage chart, a user list with admin and member roles, and a sign-in audit log. Caption: Illustrative view of the Hathr.AI Enterprise admin panel. Names and figures are examples. Delete this note after inserting.]
- Seat overview. Seats in use against the seats you bought. Hathr.AI enforces the limit and alerts your admins as seats fill, so a new hire never surprises finance.
- User list. Every member of your organization, their role, and whether your directory provisioned them.
- Sign-in audit log. Hathr.AI records authentication events for your organization, so an admin can see who signed in, when, and which sign-ins failed or hit a policy block.
- Usage dashboard. Usage across the organization over time, for budgeting and for spotting teams that have not started.
Which AI tools support audit trails for HIPAA?
A HIPAA audit trail for an AI tool starts with knowing who accessed it, because the Security Rule's audit controls standard, 45 CFR 164.312(b), requires mechanisms that record and examine activity in systems that contain PHI. Hathr.AI Enterprise logs authentication events for your organization and shows them to your admins, alongside the user list and seat history. Pair that log with your identity provider's own records and you can answer an auditor's access question from two independent sources.
Why does SSO matter for HIPAA compliance?
SSO and SCIM matter for HIPAA because the Security Rule asks you to control and end each person's access, and a separate AI login outside your directory is an account nobody remembers to close. The relevant safeguards are specific:
- Unique user identification, 45 CFR 164.312(a)(2)(i): every person gets their own account. SSO ties that account to the identity your organization already verifies.
- Information access management, 45 CFR 164.308(a)(4): you decide who gets access and at what level. Hathr.AI takes roles from your directory groups.
- Termination procedures, 45 CFR 164.308(a)(3)(ii)(C): access ends when employment ends. SCIM makes that a directory event instead of a ticket someone has to file with an AI vendor.
- Audit controls, 45 CFR 164.312(b): you can record and examine access. Hathr.AI logs sign-in events for your admins.
We believe offboarding is the most neglected HIPAA control in AI adoption. If a departed employee can still open an AI tool on Monday that holds last month's chart summaries, your BAA with the vendor does nothing for you. The BAA governs the vendor. Your access controls govern your people.
The same logic explains shadow AI. A policy memo telling staff to stop pasting charts into a personal chatbot does not work. Giving them a tool that does the same job, sits behind the corporate login, and has the compliance team's approval does. For the data-handling side of that decision, see AI that does not train on your data.
How do you roll out enterprise HIPAA-compliant AI?
You can roll out Hathr.AI Enterprise in six steps, and the first one takes ten minutes with no IT involvement.
- Run one real task on a trial seat. Upload a document your team handles every week, such as a denial letter and the chart it disputes, and ask Hathr.AI for an appeal draft. Export the answer as a DOCX and compare it with what your staff would have written.
- Send us your domain and identity provider. Tell us which directory you run and which email domains belong to your organization. We scope the deployment and quote the seats.
- Connect SAML and SCIM. Your identity administrator adds Hathr.AI as an enterprise application, enters the SCIM token we issue for your organization, and assigns a pilot group. We walk your IT team through the setup.
- Map groups to roles. Choose which directory group becomes Hathr.AI admins. Everyone else assigned to the app signs in as a member.
- Set seats, billing, and retention. Pick a seat count, pay by card or invoice, and set the data-retention schedule your records policy requires.
- Expand by directory group. Add departments by assigning groups. Remove access the same way, and watch both in the admin panel.
Upload your first document in Hathr.AI, free for 7 days. Teams planning more than a handful of seats can book an enterprise scoping call.
What else shipped for everyday Hathr.AI users?
Export a single answer as PDF, DOCX, or TXT
Every Hathr.AI response now carries three actions: copy, export, and delete. Export produces a PDF, DOCX, or TXT file of that one answer, with its formatting intact, so you can drop a finding into a report or send it to a colleague who does not use Hathr.AI. We rewrote the download path so browser popup blockers no longer stop it.
Bulk deletion that finishes
Our support queue showed bulk deletions of chat history failing partway through, deleted messages lingering on screen, and long cleanup runs breaking when a session token expired. We fixed all three. The deletion now completes in one pass, the history list corrects itself as rows disappear, and an expiring token no longer stops the job. Customer-controlled deletion is a compliance control, and a delete button that fails halfway undermines it.
A visible line between tool steps and the answer
When Hathr.AI reads your documents or runs a tool to answer a question, the response now separates the tools it used from the final answer. You can check the source step before you rely on the conclusion. Hathr.AI surfaces evidence. A qualified person on your team signs off on anything that touches care, coding, or medical necessity.
How does Hathr.AI ship updates without static credentials?
Hathr.AI builds and releases through an automated pipeline that authenticates to AWS with short-lived, role-based credentials, so no long-lived cloud keys sit in the build system. Each release passes gated tests, linting, and type checks before it deploys to our GovCloud environment, and each deploy leaves an audit trail. Your security reviewer can ask us for the details during procurement.
How much does enterprise HIPAA-compliant AI cost?
Hathr.AI publishes its self-serve prices and quotes the enterprise tier.
- Hathr.AI web app: $47 per user per month, no seat minimums, unlimited queries, uploads, and downloads, a signed BAA on every account, and a 7-day free trial. Details on the pricing page.
- Hathr.AI API: HIPAA-compliant plans with a signed BAA run $225 to $1,200 per month by token volume. A $45 Base plan exists for non-PHI work and is not HIPAA-compliant. See the HIPAA-compliant AI API.
- Hathr.AI Enterprise: a per-seat plan with SAML SSO, SCIM provisioning, directory-mapped roles, the admin panel, seat alerts, and custom retention, billed by card or invoice. Priced by quote.
Pricing effective August 2026.
Frequently asked questions
Is Claude Enterprise HIPAA compliant?
Claude Enterprise can hold PHI once the organization's Primary Owner enables HIPAA and accepts Anthropic's BAA, according to Anthropic's July 2026 documentation. Coverage applies to listed features, and Cowork is not yet covered. Hathr.AI runs Claude models in AWS GovCloud with a signed BAA on every web app account and no HIPAA setting to switch on.
Is Claude Team HIPAA compliant?
No. Anthropic states that Team plans and individual plans (Free, Pro, and Max) cannot enable HIPAA. A team that wants Claude models with a BAA can use Claude Enterprise, or Hathr.AI, where every $47 seat includes a signed BAA and there is no seat minimum.
Which enterprise AI tools are built for GDPR and HIPAA compliance?
For HIPAA, look for a signed BAA, a defined processing environment, SSO with SCIM, and an admin audit log. Hathr.AI is built for HIPAA and US federal frameworks, including FedRAMP High, NIST 800-53, NIST 800-171, and 42 CFR Part 2, and runs in AWS GovCloud (US). Organizations with EU data residency requirements should confirm GDPR terms with each vendor before signing.
Which platforms help healthcare organizations govern LLM usage and keep audit trails?
Hathr.AI Enterprise gives healthcare admins a seat overview, a user list with directory-mapped roles, a sign-in audit log, and a usage dashboard, with SSO and SCIM controlling who gets in. It runs Claude models in AWS GovCloud (US) inside a FedRAMP High boundary with a signed BAA on every account.
How much do HIPAA-compliant AI chatbot platforms typically cost?
Prices range from per-seat plans to enterprise contracts. Hathr.AI's web app costs $47 per user per month with no seat minimum and a signed BAA on every account. HIPAA-compliant API plans run $225 to $1,200 per month. Hathr.AI quotes enterprise seats with SSO and SCIM, billed by card or invoice.
What is the best private AI for a healthcare organization that can't use commercial cloud AI?
An organization barred from commercial cloud AI needs a tool that runs in a government-authorized environment. Hathr.AI runs Claude models in AWS GovCloud (US) inside a FedRAMP High boundary, never uses customer data for training, and keeps customer data off the commercial internet, which supports CMS and other federally regulated data.
Does Hathr.AI support SSO and SCIM?
Yes. Hathr.AI Enterprise supports SAML 2.0 single sign-on and SCIM 2.0 provisioning for users and groups, built for Microsoft Entra ID and Google Workspace. Your directory groups set admin and member roles, and your organization owns and deprovisions every seat. MFA is on for every Hathr.AI account.
Try it on your own documents
Hathr.AI costs $47 per user per month with no seat minimums, includes a signed BAA on every account that you accept at signup, and starts with a 7-day free trial. Upload one document your team handled this week and see what comes back. Start your free trial, compare options in our HIPAA-compliant AI tools buyer's guide, or contact us to set up Hathr.AI Enterprise with SSO.
.jpeg)
Our Youtube Videos
Hathr.AI is the fastest, safest way to handle sensitive medical records with HIPAA-compliant artificial intelligence. In this demo, watch how you can:✅ Summarize a patient’s medical record ✅ Generate an AI-assisted treatment plan ✅ Write a letter to the patient in plain English ✅ Suggest CPT billing codes ✅ Draft an insurance appeal for a denied claim ✅ Evaluate the case for potential malpractice — all in under 5 minutes.The only AI tool hosted in AWS GovCloud and Powered by Claude 4.0 Sonnet, Hathr.AI is trusted by hundreds of practices that need speed, security, and compliance.Learn more: hathr.ai For healthcare teams: hathr.ai/healthcare Reach out to learn more: contact@hathr.ai
#HIPAACompliantAI#ArtificialIntelligenceInMedicine#HealthcareAI#MedicalBillingAI#AIForDoctors#HIPAAAI#MedicalRecords#AIInHealthcare
Description
As Hathr.AI, we are dedicated to providing a private, secure, and HIPAA-compliant AI solution that prioritizes your data privacy while delivering cutting-edge technology for enterprises and healthcare professionals alike.
In this video, we’ll dive deep into the growing concerns around data privacy with AI tools—especially in light of recent revelations about Microsoft’s Word and Excel AI features. These new features have raised alarm over data scraping practices, where user data could be used without clear consent, leaving individuals and organizations exposed to potential privacy breaches. What makes this especially concerning is the "opt-in by default" design, which could lead to unintended data sharing.
In contrast, Hathr.AI ensures that your data stays yours. With a firm commitment to HIPAA compliance, we take the protection of sensitive healthcare data to the highest level. Our platform is built with the understanding that privacy is not an afterthought but a fundamental pillar of our design. We don’t collect, store, or sell user data, and we employ state-of-the-art encryption, secure access protocols, and clear user consent processes to keep you in full control.
We’ll also touch on why Hathr.AI, powered by advanced LLM (Large Language Models) like Claude AI, offers a secure and private alternative for businesses looking to leverage AI technology without compromising sensitive information. While some AI tools may collect or expose data through ambiguous or hard-to-find opt-out settings, Hathr.AI puts transparency and security at the forefront, offering peace of mind in an era of increasing digital vulnerability.
If you’re concerned about your privacy or looking for a HIPAA-compliant AI solution that respects your data, Hathr.AI provides the robust security, transparency, and ethical design that you need.
Key Points:
- HIPAA Compliant AI: Built for healthcare professionals, ensuring compliance with privacy regulations.
- Privacy-first: No data scraping, no data selling, full user control over information.
- Claude AI: Secure, powerful LLM tools for advanced capabilities without compromising security.
- Data Transparency: Say goodbye to hidden opt-in/opt-out toggles—Hathr.AI gives you clear, easy-to-understand privacy settings.
Tune in to learn how Hathr.AI ensures your AI tools remain private, secure, and trustworthy, while still delivering the performance and accuracy you need to thrive in a fast-evolving digital landscape.
Don't forget to like, comment, and subscribe for more insights on secure AI solutions and how to protect your organization from emerging privacy risks!
Description
Discover how Hathr AI's advanced AI tools transform federal acquisition processes with unparalleled security and efficiency. Designed for government professionals, this video showcases Hathr AI’s capabilities, including secure AI data analysis, HIPAA-compliant tools, and AWS GovCloud integration, to help streamline decision-making and document management. Perfect for agencies seeking private, compliant, and powerful AI solutions, Hathr.AI delivers tools tailored for healthcare and government needs.
Key Topics Covered:
AI-driven data analysis for governmentHIPAA-compliant, secure AI tools for federal agencies
Private deployment options with AWS GovCloud
Learn more about Hathr AI’s secure, high-performance solutions at hathr.ai and transform your agency’s acquisition process with cutting-edge AI.
Description
Discover how Hathr.AI simplifies NSF grant evaluations with advanced AI-driven compliance and proposal review tools. This video showcases Hathr.AI’s capability to streamline grant compliance checks, enhance accuracy, and save time for evaluators and applicants alike. Ideal for research institutions, government agencies, and proposal writers, Hathr.AI offers secure, HIPAA-compliant AI solutions tailored to meet the complex requirements of NSF and other grant processes.Highlights:AI-powered compliance checks for NSF grant proposalsFast, accurate, and secure evaluations with Hathr.AITailored solutions for research, government, and healthcareOptimize your grant proposal process with Hathr.AI's private, secure AI tools. Learn more at hathr.ai and transform how you handle grant evaluations and compliance.
Description
Join Hathr.AI at the Defense Information Systems Agency (DISA) Technical Exchange Meeting to explore innovative AI solutions tailored for federal and defense applications. In this session, we highlight Hathr.AI's secure, private AI tools designed for efficient data handling, HIPAA compliance, and seamless integration within government systems, including AWS GovCloud. Perfect for agencies seeking reliable AI for data analysis, document summarization, and secure decision-making, Hathr.AI provides cutting-edge technology for defense and healthcare needs.Highlights:AI tools for federal and defense data managementSecure, HIPAA-compliant AI solutions with AWS GovCloudEnhancing operational efficiency with private AI deploymentsDiscover how Hathr.AI's solutions empower government and defense agencies to stay at the forefront of innovation. Visit https://hathr.ai to learn more about our services.
Latest insights and trends
AI Healthcare Solutions: How a HIPAA Compliant LLM can Revolutionize your practice
.png)
DeepSeek AI: Interesting Methods, Dangerous Product
Challenges Finding Compliant AI: ChatGPT is Watching You
