Short answer: Not the PHI. A billing company that handles PHI for providers is usually a business associate, and HIPAA lets a business associate use or disclose PHI only as its business associate contract permits or requires. Its own operating records with PHI removed are the realistic scope.
Business associate limits
Under 45 CFR 164.502, a business associate may use or disclose protected health information only as permitted or required by its business associate contract or as required by law (45 CFR 164.502).
What could be in scope
- Denial-management and appeals workflows without patient data.
- Payer-rule knowledge bases the company wrote.
- Support tickets with PHI removed.
- Sales and onboarding records about provider clients (check contracts).
Fit
Ask Mode whether billing companies count as medical (15+) or another industry (50+). micro1 asks for 30+ employees, mostly English data, and says it is prioritizing US companies (micro1).
This is general information, not legal advice. Talk to your own attorney or compliance advisor before you share or license any records.
What could your company's records be worth?
Answer 6 questions. See the published range for a company like yours and which program fits. Takes about a minute.
Frequently asked questions
Can our clients authorize it?
Only within HIPAA's rules and your BAA. Ask healthcare counsel.
Is de-identified claims data licensable?
That depends on your BAAs and HIPAA de-identification. Mode excludes health records regardless.
Sources
- 45 CFR § 164.502, including the sale-of-PHI rule (Cornell LII)law.cornell.edu
- Mode / BizBuyData referral pagebizbuydata.com
- micro1 company referral pagemicro1.ai
Referral-fee disclosure: we may be paid by a program if your company signs with it after using this site. General information only, not legal advice.
Compare programs
Best AI data program for a medical or dental practice (non-clinical)Side by side from each program's own pages. Rankings follow published rules, not referral fees.