Question 1

Is OpenAI HIPAA compliant?

Accepted Answer

OpenAI offers a Business Associate Agreement (BAA) for its API under Enterprise terms, but the latest open source models (GLM-5.3 and GLM-5.3-Flash, DeepSeek-V4-Pro and V4-Flash, Kimi K3, Qwen3.8 27B/Flash-Next/Max, and others) are not available through OpenAI at all. OpenMed Router brings those same open source models under a HIPAA-compliant deployment with a signed BAA.

Question 2

Does AWS Bedrock offer a BAA?

Accepted Answer

Yes - AWS Bedrock can be configured as HIPAA-eligible and offers a BAA. However, Bedrock supports only a limited subset of models (largely Anthropic, Meta, and Amazon), and closed-source model pricing is often around 10x higher than running equivalent open source models. OpenMed Router gives you a wider catalog of the latest open source models at a fraction of the cost.

Question 3

Can I use GLM, DeepSeek, Kimi, Qwen, or MiniMax under HIPAA?

Accepted Answer

Yes. The open source licenses for these models permit commercial use. HIPAA compliance depends on how the model is hosted and whether PHI is protected with a signed BAA, encryption in transit and at rest, and access controls - all of which OpenMed Router provides.

Question 4

Is OpenRouter HIPAA compliant?

Accepted Answer

OpenRouter (the popular inference aggregator) is not positioned as a HIPAA-compliant provider and does not provide a BAA for open source model workloads. Here at OpenMed Router, we follow the same unified-API model as OpenRouter, but add HIPAA-compliant infrastructure and an AI Governance layer for covered entities and their business associates.

Question 5

How is this 10x cheaper than Azure OpenAI or Bedrock?

Accepted Answer

Closed-source frontier models carry large per-token margins. Open source models can be served efficiently on optimized inference infrastructure, and those savings are passed through. You also avoid cloud egress lock-in and minimum commitments. Exact savings depend on the model and volume you select.

Question 6

When can I start using it?

Accepted Answer

We are currently onboarding design partners, with general availability is coming soon! Join the waitlist to be prioritized - we'll reach out with a qualification call and early access.

Every model, HIPAA-compliant

DeepSeek-V4.1-Flash

GLM-5.3

GLM-5.3-Flash

GLM 5.2

Kimi K3

MiniMax M3

DeepSeek-V4-Pro

Kimi K2.7 Code

MiniMax M2.7

DeepSeek-V4-Flash

DeepSeek-V4-Flash-Vision-Exp

Qwen3.8-Max

Qwen3.8-27B

Qwen3.8-Flash-Next