HIPAA, SOC, and ISO compliance

Important

This content is archived and is not being updated. For the latest documentation, see Microsoft Power Platform product documentation. For the latest release plans, see Dynamics 365 and Microsoft Power Platform release plans.

Enabled for Public preview General availability
End users by admins, makers, or analysts - This feature is released. Aug 6, 2020

Feature details

Create chatbots with Power Virtual Agents that can handle protected health information (PHI) when your organizations are bound by HIPAA (a health information privacy act in the United States). Power Virtual Agents also acquired System and Organization Controls (SOC 2) and ISO certifications.

Scenarios that involve PHI include using a chatbot to:

  1. Ask individuals to provide their health information (blood pressure, weight, and so on).
  2. Capture health information and personally identifying information, such as the customer’s IP address or email address.
  3. Give calculated health recommendations (decision engine).

![NOTE] Power Virtual Agents is not intended for use as a medical device. For the intended use of Power Virtual Agents and medical devices, go to this disclaimer.

See also

Standards compliance and certification (docs)