Guide · AI Receptionists

HIPAA isn't free on a developer voice platform — on Vapi it's a $2,000/mo line item

The per-minute rate is the headline; the BAA is the bill. Here's what HIPAA actually adds on top of an AI voice platform's published rate, vendor by vendor.

Updated Jun 10, 2026 5 sources

The honest answer most pricing pages won’t give you: on Vapi, HIPAA is a flat $2,000/mo add-on that sits on top of the $0.05/min platform fee — so a dental practice running 200 calls a month at 3 minutes each (600 talk-minutes, about $30 of usage) pays roughly $2,030/mo the moment it needs a signed BAA. The compliance line is sixty-six times the call cost. On Synthflow, the number is worse in a different way: you can’t see it at all, because HIPAA is gated behind a custom Enterprise quote. And on Phonely and Bland, the same BAA arrives folded into an Enterprise tier with no separately-priced surcharge. HIPAA is never free on these platforms — but only one vendor makes you write a check labeled “HIPAA.”

The rate you compare on is not the rate you sign on

Per-minute developer platforms win the sticker-price race in this market — Vapi’s $0.05/min, Retell’s $0.07/min floor, Synthflow’s $0.09/min voice engine, Bland’s $0.14/min all-in. Healthcare buyers reach for those same numbers and then discover the BAA changes the math entirely. Here is how compliance is priced on every dataset vendor that states both HIPAA support and an available signed BAA:

VendorBase rateHIPAA / BAA pricingStructure
Vapi$0.05/min (platform fee)$2,000/mo add-onSeparately-priced surcharge
Synthflow$0.09/min (voice engine)Custom Enterprise quoteGated, not published
PhonelyPro $150/mo flatFolded into EnterpriseNo surcharge published
Bland$0.14 / $0.12 / $0.11/minFolded into EnterpriseNo surcharge published
Retell AI$0.07–$0.31/minAvailable, no surcharge publishedFolded into platform

Two structures, two very different buying experiences.

Vapi: the only visible HIPAA price tag

Vapi is the one vendor that puts a dollar figure on the BAA: $2,000/mo, stated on its pricing page alongside the $0.05/min Build platform fee. Credit where due — that transparency is rare. But it reframes the entire “cheapest per-minute platform” pitch for a healthcare buyer. At 600 talk-minutes, the platform fee is $30; the HIPAA add-on is $2,000. You would have to run roughly 40,000 minutes a month before the per-minute usage even matched the compliance surcharge. For a single-location clinic, HIPAA is the bill, and the $0.05/min headline is a rounding error against it.

Synthflow: the price you can’t see

Synthflow’s published Pay-As-You-Go rate is $0.09/min for the Voice Engine, with LLM and telephony billed on top. Its compliance posture is documented — SOC2, GDPR, ISO 27001 — but HIPAA is called out for Enterprise only, and Enterprise is a custom quote. There is no number to put in a spreadsheet. For a buyer, “request a quote” is not a price; it’s a sales cycle. The practical cost of HIPAA on Synthflow is unknowable from the public page, which is its own kind of expensive.

Phonely and Bland: BAA without a surcharge line

The contrast is Phonely and Bland, both of which state HIPAA with a signed BAA but publish no standalone HIPAA fee. On Phonely, the BAA signature is available on its Enterprise tier; the flat Pro plan that lands a small practice at $150/mo is the visible anchor, and Enterprise is where compliance lives without a separate $2,000 charge bolted on. Bland is similar — its all-in talk rates ($0.14, $0.12, and $0.11/min across Start, Build, and Scale) carry HIPAA eligibility into its Enterprise contract rather than as an itemized add-on. Retell AI also lists HIPAA with an available BAA against its $0.07–$0.31/min range and publishes no separate surcharge.

That doesn’t make compliance literally free on those three — Enterprise tiers carry their own custom pricing and minimums the public page doesn’t show. But the structural difference matters: nobody hands you a line item that reads “$2,000/mo, HIPAA.” The cost is absorbed into a negotiated contract, not stapled to your usage bill.

How to read this

For a healthcare buyer, the per-minute leaderboard is a trap. The four numbers that decide your bill are the four BAA structures above, not the four base rates. If you want a published HIPAA price, Vapi gives you one — $2,000/mo — and it will dominate everything else you spend until you’re running tens of thousands of minutes. If you want HIPAA folded into a flat managed plan, Phonely at $150/mo is the most legible small-practice path, with Bland and Retell offering BAA-eligible compliance inside their per-minute contracts. And if you’re evaluating Synthflow, budget for a sales call before you budget for the platform — because until that quote lands, the most important number in your decision is the one you can’t see.