Safe use, in plain words

Safe AI for assisted living homes

The same AI model can be fine for resident information on one plan and off-limits on another. The contract decides, not the model. Here is the line we hold for every home we work with. It is not legal advice: check your state's rules and ask your attorney.

Get your free audit Get the free playbook

Not legal advice. Vendor terms and state rules change. What follows is what we found as of October 2026, with the source named for each point. Check your state, read the vendor's own HIPAA page, and ask your attorney before you rely on any of it.

The line

Green, yellow, red: what you can put into AI

Most of the work operators want help with never touches a resident's record. In our analysis of 63 operator interviews, 274 of 319 problems - 86% - were green.

Green

Any approved tool

No resident information at all.

Policies drafted from public state rule text
Inspection checklists and mock-survey questions
Job posts, interview kits, training quizzes, translation of procedures
Family-letter templates, your Google profile, website copy

Yellow

BAA account, or de-identify

Anything about one specific resident.

Incident report drafts, service plan drafts
A family update about one person
Only on an AI account whose provider has signed a business associate agreement (BAA), or with every identifier removed: no names, initials, birth dates, room numbers, photos or voices

Red

Never

Not on any plan, not with any workaround.

Names plus health details in a free or personal chatbot
Resident records moved through automation tools that will not sign a BAA
Photos of residents without written consent
AI deciding care, medication, admission or discharge
AI-written text sent to the state that nobody checked line by line

Where the risk really is

The biggest risk is not the tool you pick. It is the one already on your staff's phones.

74% of senior living workers use AI at least occasionally (Argentum member brief, May 2026). If you have no policy, your caregivers are deciding the rules on their own.

That is why a one-page AI policy is the first install for every home, open or pre-opening - before any new tool.

Green: no resident data (274)
Yellow: needs a BAA or de-identifying (42)
Red: do not use AI for it (3)

Answers

Four questions every operator should be able to answer

Do consumer AI plans sign a BAA?

No. The free and individual tiers of the major AI assistants do not. Coverage comes with specific business, enterprise or API setups - and only once the agreement is in place.

-Anthropic (Claude): a BAA covers Claude Enterprise with HIPAA activated and the Anthropic API. Free, Pro and Max are not covered, and neither is Enterprise without HIPAA activated.
-OpenAI (ChatGPT): OpenAI's guide lists ChatGPT for Healthcare, ChatGPT for Clinicians, and Enterprise or Education with the Regulated Workspace as eligible. Its consumer tiers (Free, Plus, Pro) and ChatGPT Business are not.
-Zapier: says it cannot sign business associate agreements and that HIPAA-regulated data is not supported. Use it for green work only.

Source: Anthropic BAA page; OpenAI BAA and HIPAA guide (PDF); Zapier data privacy. Read October 2026; check again before you rely on it.

Does HIPAA even apply to my home?

It depends on how you bill. A provider becomes a HIPAA covered entity by sending standard electronic transactions, such as claims or eligibility checks to Medicaid, Medicare or an insurer.

Many private-pay homes are not covered entities. Many homes that bill a state Medicaid program or an insurer electronically are. Ask whoever does your billing one question: do we send any electronic claim or eligibility check to a state program, a health plan, Medicare or an insurer?

Either way, your state's resident-privacy and records rules still apply, and families expect their mother's information to be safe. Treat resident data as if HIPAA applies, and have your attorney confirm your status.

Source: CMS, HIPAA standard transactions FAQ. Not legal advice.

What about cameras and monitoring?

Arizona example - check your state: assisted living facilities must tell the state health department their electronic monitoring policy by December 1, 2026, or at initial licensure, and the department publishes it.

The Arizona law (SB 1564, signed June 2026) covers whether you allow resident-installed monitoring devices, whether you use devices in common areas, and whether you use technology that tracks entry, exit or movement in a resident's room. Updates are required when the policy changes.

Pre-opening homes need the policy in writing before licensing. Write what you actually do, and have your attorney review it before it is filed.

Source: Arizona SB 1564, Laws 2026, Chapter 183.

Can AI help with care decisions?

No. AI may draft; a named person decides, reviews and signs.

Medication, level of care, admission, discharge, incident classification and anything sent to the state, a family or a payer stay human. AI can organize a voice memo into report headings with blanks; it must not add facts, and a manager completes and signs the real record.

Template

A one-page AI policy outline for a small home

Twelve lines. Fill in the brackets, have your attorney read it, train it in twenty minutes in your staff's language, and keep signed copies in the admin binder. The full version is page 15 of the free playbook.

Line	What it says
1. Purpose	AI may help with writing, training and admin. It never replaces a caregiver, nurse, provider or the manager's judgment.
2. Approved tools	Only [tool names], on work accounts. No personal AI accounts for work. No new tool or browser extension without manager approval.
3. Three colors	Green: no resident information, any approved tool. Yellow: resident-related only on a BAA account or fully de-identified. Red: never.
4. Always human	Medications, level of care, admission, discharge, incident classification, discipline, and anything sent to the state, a family or a payer. AI may draft; a named person reviews and signs.
5. Verify	Every fact, rule citation, number and translation from AI is checked against the source before use. If it cannot be checked, it is not used.
6. Families	The admission packet says AI may help draft routine messages and that staff review anything about a resident. AI is never presented as a nurse or a person.
7. Cameras and audio	Only as the written monitoring policy allows. No AI review of resident video or audio without a BAA and consent.
8. Scams	Any change to bank, payment or vendor details is confirmed by calling a known number. Urgent voice or video requests for money are never acted on alone.
9. Mistakes	If resident information goes into an unapproved tool, tell the manager the same day. The manager logs it, deletes what can be deleted, and checks notification duties with counsel.
10. Training	Twenty minutes at onboarding, in the staff member's language, signed. Refreshed at each review.
11. Records	Keep the tool list, any BAAs, training sign-offs and the incident log. Ask your insurer about cyber coverage.
12. Review	The owner reviews this policy every six months and whenever a tool or law changes. Owner: [name]. Effective: [date].

A template, not legal advice. Your attorney should review it for your state and your home.

FAQ

Questions operators ask first

Can my caregivers use free ChatGPT for work?

For green work only - training quizzes, job posts, translating a procedure - and ideally on a work account named in your AI policy. Never with resident names or health details. Free and individual plans do not sign a BAA.

What does de-identify mean in practice?

Remove anything that could point to a person: names, initials, birth dates, room numbers, addresses, phone numbers, ID numbers, photos and voices. Use role labels like Resident A and Caregiver 1. Voice memo transcripts are the leakiest input, so check them before pasting.

Can I send resident information through Zapier?

No. Zapier states it cannot sign business associate agreements and does not support HIPAA-regulated data. Use it for green flows like lead forms, review requests and job applicants, never for resident records.

Is this legal advice?

No. It is what we found in each source as of October 2026, with the source named. Check your state's current rules and ask your attorney about your home.