# Is Medrecords AI HIPAA compliant, and who can see my cases? > Who can open your cases in Medrecords AI, how the BAA works, where your records are stored, and how to delete a case. Canonical page: https://medrecords.ai/help/tasks/security-hipaa/ --- New — **Missing Records Detection:** flags every visit, provider, and date missing from the file. [See how →](https://medrecords.ai/product/missing-records-identification/) [Home](https://medrecords.ai/) ›[Help](https://medrecords.ai/help/) › — Is Medrecords AI HIPAA compliant, and who can see my cases? MEDRECORDS AI HELP ## Is Medrecords AI HIPAA compliant, and who can see my cases? Yes. Medrecords AI is HIPAA compliant and runs under SOC 2 controls. You accept our Business Associate Agreement when you sign up. Only you can open the cases you create. Your records are stored in the United States, on Amazon Web Services, and they are never used to train AI models. Last checked 2026-10-24 — ·Written by Ahmed Jemaa **Help center contents26 articles** Start here - [Choose the right case type](https://medrecords.ai/help/tasks/choose-case-type/) - [Which files can you upload?](https://medrecords.ai/help/tasks/file-types-limits/) - [Confirm the case details, key date and focus](https://medrecords.ai/help/tasks/confirm-case/) - [Fix a failed upload or a stuck case](https://medrecords.ai/help/tasks/troubleshooting/) Work with the records - [Read the medical chronology](https://medrecords.ai/help/tasks/chronology/) - [Check any fact against its source page](https://medrecords.ai/help/tasks/verify-source/) - [Search your records with exact text or keywords](https://medrecords.ai/help/tasks/search/) - [Filter and group the documents index](https://medrecords.ai/help/tasks/documents-index/) - [Add flags, highlights and notes to records](https://medrecords.ai/help/tasks/annotations/) - [How duplicate pages are found and removed](https://medrecords.ai/help/tasks/deduplication/) - [Work through the missing records list](https://medrecords.ai/help/tasks/missing-records/) - [Add records to an existing case](https://medrecords.ai/help/tasks/add-records-later/) Write and share - [Edit the chronological narrative](https://medrecords.ai/help/tasks/narrative/) - [Create a report in Report Studio](https://medrecords.ai/help/tasks/report-studio/) - [Set up report templates](https://medrecords.ai/help/tasks/templates/) - [Export your work](https://medrecords.ai/help/tasks/export/) Account and trust - [Set your role](https://medrecords.ai/help/tasks/roles/) - [Is Medrecords AI HIPAA compliant, and who can see my cases?](https://medrecords.ai/help/tasks/security-hipaa/) - [How accurate is Medrecords AI, and what are its limits?](https://medrecords.ai/help/tasks/accuracy-limits/) - [Glossary of terms](https://medrecords.ai/help/glossary/) Case type playbooks - [Work a birth injury case](https://medrecords.ai/help/case-types/birth-injury/) - [Work a nursing home neglect case](https://medrecords.ai/help/case-types/nursing-home/) - [Work a VA disability case](https://medrecords.ai/help/case-types/va-disability/) - [Work a mass tort case](https://medrecords.ai/help/case-types/mass-tort/) - [Work a medical malpractice case](https://medrecords.ai/help/case-types/medical-malpractice/) - [Work a personal injury or car crash case](https://medrecords.ai/help/case-types/personal-injury/) [See every topic on the help center home](https://medrecords.ai/help/) ### Who can open your cases | Who | What they can do | | --- | --- | | You, the case owner | Open, change, export and delete the case | | Other users, including people at your firm | Nothing. They cannot see the case | | Medrecords AI staff | Read a case only when needed for support. They cannot change it, and each time they open a case it is logged | Each case has 1 owner. There is no case sharing or team seat today. If a colleague needs the work, export the chronology or report and send them the file. See [export your work](https://medrecords.ai/help/tasks/export/). Each person needs their own account. Do not share a login, even inside your firm. HIPAA expects each user to have their own sign-in, so the record of who did what stays true. ### The Business Associate Agreement - The BAA is shown at sign-up, with the Terms and the Privacy Notice. You accept all 3 before you can upload. - The app records which version you accepted and when. - If your firm needs a countersigned copy, ask for one on our [HIPAA and BAA page](https://medrecords.ai/hipaa/). Many personal injury firms and insurers are not covered by HIPAA. You get the same protections under the BAA and our terms either way. ### Where your records are stored Your files and case data are stored on Amazon Web Services in the United States. The list of companies that can process records for us is on our [subprocessor list](https://medrecords.ai/subprocessors/). Each one that can touch patient data signs a BAA with us. None of them may train on your records. ### Signing in - Your session is held in a secure browser cookie. - If you change or reset your password, every open session is signed out. - Signing out ends the session on that device. ### Deleting your data 1. Open the case list. 2. Select the case, or up to 50 cases at once. 3. Delete them. Deleting a case removes its files, its data and its search entries. A case that is still processing is skipped, so wait until it finishes. When an account closes, our terms say we return or destroy the data within 30 days. Encrypted backups are kept for up to 90 days and then removed. ### Keep patient details out of chat and email The help chat in the app asks you to leave patient names and details out. Do the same when you email us. Keep records inside the app, where they are protected. ### What Medrecords AI does not do - It does not make clinical or legal decisions. Its output organizes and cites your records. You and your experts draw the conclusions. - It does not vouch for the source records. If a record is wrong, the summary of it will be too. ### Related help - [Fix a failed upload or a stuck case](https://medrecords.ai/help/tasks/troubleshooting/) - [How accurate is Medrecords AI?](https://medrecords.ai/help/tasks/accuracy-limits/) - [Export your work](https://medrecords.ai/help/tasks/export/) - Read our [security and trust page](https://medrecords.ai/security/) and the guide to [HIPAA compliant AI record review](https://medrecords.ai/guides/hipaa-compliant-ai-medical-record-review/). Facts checked against the Medrecords AI app code on 2026-10-24. ### Try it on a real file Upload a case and see the page count and cost before you confirm. [Book a demo](https://medrecords.ai/demo/)