PhiClaw vs OpenAI Dots for Medical Practices

Since OpenAI’s DevDay on September 29, 2026, the question in our inbox has been: “ChatGPT now has an always-on agent. Can my practice just use a Dot?” It is a fair question. Dots are polished, they live inside the ChatGPT app most doctors already pay for, and OpenAI is the one big lab that actually signs HIPAA BAAs.

The honest answer: a Dot on the plan you have is almost certainly not covered by a BAA, and OpenAI has not said the Dots beta is in BAA scope even on contracts that have one. PhiClaw is the same idea built for healthcare: an always-on AI employee with memory, scheduled work, and messaging, with the BAA signed on every plan and an EHR and CRM already inside. This guide compares them honestly.

What are OpenAI Dots?

Dots are OpenAI’s always-on agents inside ChatGPT, announced at DevDay on September 29, 2026. Each dot runs on GPT-6 Astra with its own cloud computer and browser, connects to 4,000+ apps through plugins, and keeps working between conversations. You reach your dot in the ChatGPT apps, on the web, in Slack or Microsoft Teams, or by voice call. An activity area shows what it is doing now, what is scheduled, and what is finished. It comes back to you with results or with a decision it needs from you.

Two design choices stand out. When idle, a dot does “proactive research” using read-only tools only. And an auto-review step checks any action that could affect your accounts or share information, with sensitive tasks always left to you. The first dot is included with ChatGPT Pro and Business Premium in eligible markets. Enterprise, Edu, and Healthcare workspaces get Dots as an admin-enabled beta that is off by default. Specialist dots exist only through enterprise pilots with OpenAI engineers.

Where Dots fall short for a clinic

Under HIPAA, a medical practice (a “covered entity”) can only hand protected health information (PHI) to a vendor that has signed a Business Associate Agreement (BAA). A BAA is the contract where the vendor promises to safeguard PHI, report breaches, and accept HIPAA obligations. No BAA means no PHI, full stop, no matter how good the product is.

Dots are the most interesting case of the always-on agents because OpenAI, unlike xAI and Meta, actually signs HIPAA Business Associate Agreements. The catch is scope. As of October 2026:

• OpenAI’s BAA covers specific products: ChatGPT for Healthcare, sales-managed Enterprise and Edu contracts, and the API. ChatGPT Plus, Pro, Team, and Business are not eligible.
• Most clinics would get Dots through Pro or Business Premium. Those plans have no BAA, so a dot there cannot touch PHI, full stop.
• On Enterprise and Healthcare, Dots are an off-by-default beta. OpenAI has not published a statement that the Dots beta is inside BAA scope. Until that is confirmed in writing for your contract, treat it as outside.
• Every connected app is a PHI path. A dot with 4,000 possible plugins, proactive read-only research while idle, and optional access to your laptop sees whatever its connectors see. The BAA with OpenAI does not cover the apps it logs into.
• Training defaults are good, but not the whole story. Business, Enterprise, and Edu workspace content is not used to train models by default, and personal plans are user-controlled. That helps, but HIPAA also needs audit trails, staff roles, and minimum-necessary access designed for a practice.

PhiClaw: like a Dot, but HIPAA on every plan

Here is the part most buyers miss: PhiClaw is the same kind of product. It is the HIPAA build of OpenClaw, the open-source agent that Grok Bot and Muse are so often compared to. So you get the same shape of experience:

• Always on. PhiClaw runs in the cloud 24/7, answers patients at 2 a.m., and keeps working when the office is closed.
• Message it like a coworker. Talk to it on WhatsApp, iMessage, Slack, Telegram, the web, or the iOS and Android apps.
• Memory and routines. It remembers your practice, your preferences, and your patients’ context, and it runs scheduled jobs such as no-show follow-ups, recall reminders, and weekly reports.
• Does multi-step work. Intake, scheduling, insurance questions, SOAP-note scribing, e-prescribing, billing, fax, website updates, and social posts, end to end.
• Sub-agents. A front-desk agent, a back-office agent, and a marketing agent coordinate under one roof.

What changes is everything around the agent. PhiClaw signs a BAA with every practice on every plan. It runs on HIPAA-eligible AWS (including Amazon Bedrock for the model) and Convex, both under BAA, with calls through Retell AI, also under BAA. Your data is never used to train a model. PHI stays inside the HIPAA-compliant PhiClaw app, encrypted and audit-logged, while consumer chat apps are used only for non-PHI convenience. And it ships with its own HIPAA EHR and CRM, plus connections to 30+ major EHRs and 300+ integrations through Keragon.

Head-to-head

✓ Yes    ~ Partial / not published    ✗ No    As of October 2026, from public vendor pages and launch coverage. Verify current terms with each vendor.

When a Dot is still the right call

If your practice is already on a sales-managed ChatGPT Enterprise or ChatGPT for Healthcare contract with a signed BAA, and OpenAI confirms in writing that the Dots beta is covered, a Dot is a capable general assistant for administrative work that does not need an EHR. Large health systems with a compliance team may get there.

An independent practice on Pro or Business Premium is in a different spot. No BAA, no EHR, no patient-messaging channels, and an agent that reads your connected apps while idle. That is the gap PhiClaw closes.

Clinical responsibility either way

With any of these tools, the licensed clinician stays the decision-maker. PhiClaw is built so a doctor reviews and signs off where it matters while the agent handles the surrounding labor. In roughly four months since launch it has executed 76,000+ tasks and answered 83% of patient messages in under 60 seconds, with a human always in the loop.

Frequently asked questions

Is OpenAI Dots HIPAA compliant?

Not on the plans most clinics would use. Dots ship with ChatGPT Pro and Business Premium, which are not eligible for OpenAI's BAA. On Enterprise and ChatGPT for Healthcare, where a BAA exists, Dots are an admin-enabled beta and OpenAI has not published that the beta is inside BAA scope. Get it in writing before any PHI is involved.

Does OpenAI sign a BAA?

Yes, for ChatGPT for Healthcare, sales-managed Enterprise and Edu contracts, and the API. Not for Plus, Pro, Team, or Business. Whether a Dot on a covered contract is itself covered is not published.

What is PhiClaw, in one sentence?

PhiClaw is the HIPAA-compliant build of the OpenClaw AI agent: an always-on AI employee for medical practices that signs a BAA on every plan, runs on HIPAA-eligible infrastructure under BAA, and ships with a built-in EHR and CRM, intake, scribing, e-prescribing, billing, fax, and patient messaging.

Can PhiClaw do what a Dot does?

For a practice, yes. Both are always-on agents with memory, scheduled work, messaging channels, and sub-agents that come back to you only for decisions. PhiClaw adds the medical workflows and the compliance program, and nothing is off-by-default or beta.

How does pricing compare?

PhiClaw is flat and predictable: Starter at $300/mo for a single clinic, or Enterprise at 30% of what we save you, with a BAA on every plan. Dots come with ChatGPT Pro ($200/mo) or Business Premium, with no BAA on either, and enterprise pricing is sales-managed.

Can my staff use a Dot for non-patient tasks?

Low-PHI work like drafting a blog post is lower risk. The problem is connectors: a dot connected to the practice inbox, calendar, or phone system sees PHI during its proactive research even when the task has nothing to do with patients. Keep it off any account that touches patients unless your BAA explicitly covers it.