AI for Medical & Dental Practices
How I'd look at AI across an independent medical or dental practice: EHR, front desk, scribes, and billing. What helps, where HIPAA bites, what to ask.
Across the stack
The systems a business like yours typically runs, and where AI fits in each. Platform names are common examples, not recommendations.
EHR and practice management
Your EHR and practice management system are the center of everything, and the major vendors are building AI into them: note assistance, inbox triage, and coding suggestions. Check what yours offers first, since it already sits inside your HIPAA arrangements.
Phones and front desk
Scheduling, rescheduling, refill requests, and directions make up much of the call volume. AI answering and two-way texting can take some of that load. It needs a BAA, a clear handoff to staff, and it must never give clinical advice.
Clinical documentation
Ambient AI scribes listen to the visit and draft the note for the clinician to review and sign. This is one of the most talked-about uses of AI in healthcare. It raises real questions about consent, accuracy, and how recordings are stored.
Intake and forms
Digital intake that pre-fills from the chart and flows into the EHR saves re-keying. AI can help summarize long histories for the clinician, but the source data still needs to be accurate and reviewable.
Billing and revenue cycle
Coding suggestions, claim scrubbing, and denial follow-up are good fits for AI assistance with human review. The coder or biller remains responsible for what gets submitted.
Data, security, and policy
HIPAA does not have an exception for AI. Any tool that touches protected health information needs a Business Associate Agreement and appropriate safeguards. Staff need to know which tools are approved.
How I’d look at AI in a medical or dental practice
An independent practice runs on its EHR and practice management system, plus a ring of tools around it: phones and texting, patient portal, intake forms, a clearinghouse, maybe an outside billing service, and email. The pressure points are usually the same: a front desk that can’t keep up with the phones, clinicians charting at night, and a billing team chasing denials.
AI can help with all three. It also carries more risk here than in most industries, because the data is protected health information and mistakes can reach patient care. So I start with two questions: where is time being lost, and which tools can touch PHI under a proper agreement.
Start with what you already own
- Your EHR and PM system. The major vendors have been adding AI for documentation, inbox management, and revenue cycle. These features already live inside a system covered by your existing agreements.
- Your patient communication platform. Weave, NexHealth, and similar tools have added AI features for texting and calls. If you already use one, check what’s included before adding another vendor.
- Your office suite. Microsoft 365 and Google Workspace can both be covered by a BAA if configured correctly, which gives staff a safe place for everyday drafting and summarizing.
Where AI genuinely helps
- Documentation. Ambient scribes and note assistants can take a real share of the charting burden off clinicians, if they review what they sign.
- Phones and scheduling. Handling routine calls and texts, filling cancellations, and sending reminders, with a clean handoff to a person.
- Inbox and message triage. Sorting and drafting responses to portal messages for a clinician or nurse to approve.
- Billing. Catching claim errors before submission and drafting appeal letters for denials.
- Administrative writing. Policies, patient education materials, and job descriptions, where no PHI is involved.
Where it’s overhyped or risky
- PHI in the wrong tool. The most common real problem is well-meaning staff pasting patient details into a consumer AI tool. A clear policy and an approved alternative fix most of it.
- Anything that sounds clinical to patients. An AI answering service should not triage symptoms or give medical advice. It should route to a person.
- Notes nobody reads. Ambient scribes can include things that weren’t said or miss things that were. The signed note is the clinician’s responsibility.
- Coding automation without review. Aggressive AI coding suggestions can create compliance exposure. Treat them as suggestions for a trained coder.
- Vague security claims. “HIPAA compliant” on a website is not a BAA. Ask for the agreement.
Questions to ask any vendor
- Will you sign a Business Associate Agreement, and can I see it before we commit?
- Where is patient data stored, how long is it kept, and is it used to train your models?
- For scribes: are recordings kept, for how long, and who can access them?
- Does it integrate with our EHR, or does someone copy and paste?
- How does a patient or staff member reach a person when the AI can’t help?
- What’s live on our plan today, and what’s on the roadmap?
Where I’d start
For most practices: a written AI policy, a BAA-covered tool for staff so they stop improvising, and one focused project, usually either the phones or clinical documentation, whichever is causing more pain. Pilot it with a few willing people, measure it honestly against how things work today, and expand only if it earns its place.
Common questions
Can my staff use ChatGPT at work? +
Not with patient information in a consumer account. Consumer chat tools generally don't come with a Business Associate Agreement. Some AI providers offer BAAs on business or enterprise plans, and Microsoft 365 and Google Workspace can be configured under a BAA. Pick the approved tool, write the policy, and train staff on it.
Are ambient AI scribes worth it? +
For many clinicians they're the most compelling AI tool available right now, because documentation is such a burden. Whether one fits depends on your EHR integration, specialty, how you'll get patient consent, and whether clinicians actually review notes before signing. A short trial with a few willing clinicians is the right way to find out.
Do we have to tell patients we use AI? +
For recording a visit, you need to follow your state's consent rules, and many practices ask for consent regardless. Some states have also passed laws requiring disclosure when generative AI is used in certain patient communications. Check your state's current rules and your malpractice carrier's guidance.
What does a BAA actually protect? +
A Business Associate Agreement makes the vendor contractually responsible for safeguarding PHI under HIPAA. It's necessary, but it's not the whole picture. You still need to understand where data is stored, who can access it, and what happens to it when you leave.
Does our EHR already include AI? +
Increasingly, yes, though features vary widely by vendor, version, and contract. It's worth asking your rep for a list of what's live today on your plan, as opposed to what's in a press release.
Want a straight answer for your business?
Tell me a little about how your business runs and what it runs on. I'll put together an agenda for our first conversation.