Most of the work in putting an AI receptionist on a dental line is not the script. It is the paperwork that has to exist before the first patient calls.
What a caller tells a practice (their name, that they are a patient, what hurts) can be protected health information. HHS guidance says a vendor that handles that information for a provider is generally a business associate and needs a business associate agreement (BAA). One of HHS's own examples is a third-party AI chatbot on a patient portal that helps with appointment scheduling. A phone agent is not a portal chatbot, but the reasoning carries over. HHS also says a cloud provider that only stores the data, even encrypted and without the key, is still a business associate.
HighLevel is not set up for this by default. As of October 4, 2026, it sells a $297/month HIPAA add-on that includes a BAA. Its help article says the add-on is account-wide, available on any plan, and cannot be canceled, refunded, or downgraded, and each sub-account needs its own HIPAA toggle that cannot be turned off afterward. HighLevel's platform updates page adds that the BAA may expire if the subscription lapses, and it lists Retell AI, Synthflow, and Botpress as AI subprocessors behind features such as voice AI. When we checked, the HIPAA article did not say anything specific about Voice AI transcripts, AI call summaries, or the outside language models.
That gap is why the Peace Call guide lists five questions to get answered in writing before go-live:
- Does the BAA cover Voice AI recordings, transcripts, and AI-generated summaries?
- Which voice and language-model options are covered, and which subprocessors handle call audio?
- Does anything change or stop working once a sub-account is in HIPAA mode?
- How long is call data kept, and can we set deletion rules?
- If an agency builds the agent, has it signed its own BAA with the practice?
If the answers are unclear, the guide's advice is plain: keep the AI off patient calls, or pick a vendor whose BAA covers the exact features you plan to use.
The cost side is also worth knowing early. In the guide's worked example, a single practice on the $97 Starter plan with the HIPAA add-on comes to roughly $409 a month at 200 pay-per-use AI minutes, before language-model tokens, texts, and taxes. Most of that is the plan and the add-on, not the minutes. The minute counts are illustrations, not usage data, and HighLevel says prices change.
Once the paperwork is settled, keep the collection lean under the minimum necessary standard: name, callback number, new or existing patient, a reason category, and a yes/no on swelling, bleeding, or injury. Insurance IDs, medical history, and card numbers stay with staff.
None of this is legal advice, and Peace Call does not claim any setup here is HIPAA compliant. Your compliance advisor and your contracts decide that.
Full guide, with the call flow, triage table, and a sample prompt: https://getpeacecall.com/ai-receptionist-dental-office/?utm_source=mataroa&utm_medium=social
Written with AI assistance and reviewed. Peace Call is an independent HighLevel affiliate and may earn a commission if you sign up through its links.