Guide · AI Receptionists
HIPAA isn't free on a developer voice platform — on Vapi it's a $2,000/mo line item
The per-minute rate is the headline; the BAA is the bill. Here's what HIPAA actually adds on top of an AI voice platform's published rate, vendor by vendor.
The honest answer most pricing pages won’t give you: on Vapi, HIPAA is a flat $2,000/mo add-on that sits on top of the $0.05/min platform fee — so a dental practice running 200 calls a month at 3 minutes each (600 talk-minutes, about $30 of usage) pays roughly $2,030/mo the moment it needs a signed BAA. The compliance line is sixty-six times the call cost. On Synthflow, the number is worse in a different way: HIPAA is called out for Enterprise only, and the only price its page now publishes is the floor of an Enterprise contract — $30,000 a year — with nothing telling you what compliance adds on top. And on Phonely and Bland, the same BAA arrives folded into an Enterprise tier with no separately-priced surcharge. HIPAA is never free on these platforms — but only one vendor makes you write a check labeled “HIPAA.”
The rate you compare on is not the rate you sign on
Per-minute developer platforms win the sticker-price race in this market — Vapi’s $0.05/min, Retell’s $0.07/min floor, Bland’s $0.14/min all-in. Healthcare buyers reach for those same numbers and then discover the BAA changes the math entirely. Here is how compliance is priced on every dataset vendor that states both HIPAA support and an available signed BAA, plus Synthflow, which states HIPAA for Enterprise but publishes no BAA:
| Vendor | Base rate | HIPAA / BAA pricing | Structure |
|---|---|---|---|
| Vapi | $0.05/min (platform fee) | $2,000/mo add-on | Separately-priced surcharge |
| Synthflow | none published (Pay As You Go no longer listed) | Enterprise only; contracts from $30,000 annually | Floor published, HIPAA not itemized |
| Phonely | Pro $150/mo flat | Folded into Enterprise | No surcharge published |
| Bland | $0.14 / $0.12/min | Folded into Enterprise | No surcharge published |
| Retell AI | $0.07–$0.31/min | Available, no surcharge published | Folded into platform |
Two structures, two very different buying experiences.
Vapi: the only visible HIPAA price tag
Vapi is the one vendor that puts a dollar figure on the BAA: $2,000/mo, stated on its pricing page alongside the $0.05/min Build platform fee. Credit where due — that transparency is rare. But it reframes the entire “cheapest per-minute platform” pitch for a healthcare buyer. At 600 talk-minutes, the platform fee is $30; the HIPAA add-on is $2,000. You would have to run roughly 40,000 minutes a month before the per-minute usage even matched the compliance surcharge. For a single-location clinic, HIPAA is the bill, and the $0.05/min headline is a rounding error against it.
Synthflow: a floor, not a price
Synthflow used to publish a Pay-As-You-Go rate of $0.09/min for the Voice Engine, with LLM and telephony billed on top; that plan, last seen 2026-06-27, is no longer listed as of 2026-09-27. Its compliance posture is documented — SOC2, GDPR, ISO 27001 — but HIPAA is called out for Enterprise only, and Enterprise is now the only thing the page sells: contracts that “start at $30,000 annually,” with final pricing “scoped around call volume, concurrency, telephony setup, integrations, security needs, and launch support.” So there is now one number to put in a spreadsheet — a floor of $2,500 a month ($30,000 ÷ 12), already above Vapi’s $2,030 — but not what HIPAA itself adds, and no BAA is published. For a buyer, a floor plus “contact sales” is still a sales cycle, not a price.
Phonely and Bland: BAA without a surcharge line
The contrast is Phonely and Bland, both of which state HIPAA with a signed BAA but publish no standalone HIPAA fee. On Phonely, the BAA signature is available on its Enterprise tier; the flat Pro plan that lands a small practice at $150/mo is the visible anchor, and Enterprise is where compliance lives without a separate $2,000 charge bolted on. Bland is similar — its all-in talk rates ($0.14 and $0.12/min on Start and Build; its $0.11/min Scale tier is no longer listed as of 2026-09-27) carry HIPAA eligibility into its Enterprise contract rather than as an itemized add-on. Retell AI also lists HIPAA with an available BAA against its $0.07–$0.31/min range and publishes no separate surcharge.
That doesn’t make compliance literally free on those three — Enterprise tiers carry their own custom pricing and minimums the public page doesn’t show. But the structural difference matters: nobody hands you a line item that reads “$2,000/mo, HIPAA.” The cost is absorbed into a negotiated contract, not stapled to your usage bill.
How to read this
For a healthcare buyer, the per-minute leaderboard is a trap. The four numbers that decide your bill are the four BAA structures above, not the four base rates. If you want a published HIPAA price, Vapi gives you one — $2,000/mo — and it will dominate everything else you spend until you’re running tens of thousands of minutes. If you want HIPAA from a vendor that also sells a flat managed plan, Phonely is the most legible small-practice path — its Pro plan anchors at $150/mo, though the BAA itself sits on its Enterprise tier — with Bland and Retell offering BAA-eligible compliance inside their per-minute contracts. And if you’re evaluating Synthflow, budget for at least $30,000 a year and a sales call — the contract floor is published, but what HIPAA adds to it, and whether a BAA comes with it, is not.