AI HR tools that state HIPAA compliance
The INITE Atlas lists 10. By use, the list opens with Avature, Gem, Monitor 360, GoodTime and 100hires.
The vendor states HIPAA compliance on its own trust, security or privacy page; some offer a BAA. Their statement, read with the date; we did not audit it.
Where each one says so
| Tool | Where it says so | Price | Visits/mo |
|---|---|---|---|
 AvatureContact sales | avature.net/securityread Oct 7, 2026 | Contact sales | 530k |
| GemFrom $130/mo | gem.com/securityread Oct 7, 2026 | From $130/mo | 16.4k |
 Monitor 360Free plan · From $5/user/mo | monitor360.io/trust-centerread Oct 10, 2026 | Free plan · From $5/user/mo | 3.7k |
 GoodTimeContact sales | goodtime.io/securityread Oct 8, 2026 | Contact sales | 2.4k |
 100hiresFrom $49/mo | 100hires.com/security.htmlread Oct 14, 2026 | From $49/mo | 773 |
 HarmonyContact sales | trust.harmony.ioread Oct 8, 2026 | Contact sales | 431 |
 SuperunitFrom $1.50 per use | offers a BAAsuperunit.com/privacy-policyread Oct 8, 2026 | From $1.50 per use | 275 |
 Asendia AIFree plan · From $99/mo | asendia.ai/securityread Oct 8, 2026 | Free plan · From $99/mo | 45 |
 Kempian AIFree plan · From $3,500/mo | kempian.ai/trust-centerread Oct 11, 2026 | Free plan · From $3,500/mo | 14 |
 tracFrom $27.30/user/mo | heytracai.com/privacy-policyread Oct 10, 2026 | From $27.30/user/mo | 4 |
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.