Short answer: PhiClaw is the HIPAA-compliant version of what Grok Bot does. It is an always-on AI agent with memory, scheduled routines, messaging, and sub-agents, delivered as a managed service that signs a Business Associate Agreement with your practice. As of October 2026, xAI has published no BAA for Grok Bot, so a clinic cannot use it with patient data.
What Grok Bot does, and why clinics want it
xAI’s Grok Bot (beta, August 2026) is a set of always-on agents that each get a cloud computer, sign into your tools, learn routines by demonstration, and keep working after you close your laptop. For a practice drowning in phone calls, intake forms, and follow-ups, that is exactly the help you want.
The catch is HIPAA. Grok Bot runs in Cursor’s cloud, all Bots share one set of logins, and neither xAI nor Cursor has said in writing that the Bot is covered by a BAA. Our full breakdown is in Is Grok Bot HIPAA compliant?
PhiClaw works the same way
PhiClaw is the HIPAA build of OpenClaw, the open-source agent Grok Bot is most often compared to. So the experience is familiar:
- Always on, in the cloud. Answers patients, books appointments, and chases no-shows 24/7, including when the office is closed.
- Message it like a coworker. WhatsApp, iMessage, Slack, Telegram, web, and the iOS and Android apps.
- Memory and routines. It knows your practice and runs scheduled jobs: recall reminders, follow-ups, weekly reports.
- Finishes multi-step work. Intake, scheduling, insurance questions, SOAP notes, e-prescribing (including controlled substances), billing, fax, website updates, social posts.
- Sub-agents under one roof. Front desk, back office, and marketing agents coordinate, with a human approving anything sensitive.
What makes it HIPAA
- Signed BAA on every plan. The legal contract HIPAA requires before any patient data is shared with a vendor.
- HIPAA-eligible infrastructure, also under BAA. AWS (including Amazon Bedrock for the model), Convex, and Retell AI for calls.
- Never trains on your data. Your patients’ information is yours.
- PHI stays in the app. Encrypted, audit-logged, and tied to staff roles. Consumer chat apps carry non-PHI convenience only.
- Built for a practice, not a person. Its own HIPAA EHR and CRM, 30+ EHR connections, 300+ integrations via Keragon, and free migration.
Plain English: you get the Grok Bot experience, but the vendor on the other side of the contract is accountable under HIPAA, and the agent already knows how a medical office runs.
Grok Bot vs PhiClaw at a glance
| PhiClaw | Grok Bot xAI, beta | |
|---|---|---|
| Always-on cloud agent | ✓ | ✓ |
| Memory + routines | ✓ | ✓ |
| Signs a HIPAA BAA | ✓ | ✗ |
| Infrastructure under BAA | ✓ | ~ |
| Never trains on your data | ✓ | ~ |
| Built-in EHR + CRM | ✓ | ✗ |
| Medical workflows (scribe, Rx, billing, fax) | ✓ | ✗ |
| Managed setup, live in days | ✓ | ~ |
✓ Yes ~ Partial / not published ✗ No As of October 2026, from public vendor pages and launch coverage. Verify current terms with each vendor.
Pricing
PhiClaw is flat and predictable: Starter at $300/mo for a single clinic, or Enterprise at 30% of what we save you, with a BAA on every plan. Grok Bot is bundled into SuperGrok and Cursor subscriptions with weekly limits and no public standalone price. Full details on the pricing page.
Related Phiclaw pages
- PhiClaw vs Grok Bot for Medical Practices (full comparison)
- Is Grok Bot HIPAA compliant?
- HIPAA Meta Muse alternative
- HIPAA AI agent for medical practices
- EHR and CRM integrations
- Pricing
FAQ
Is PhiClaw really like Grok Bot?
Yes. Both are always-on AI agents with memory, scheduled routines, messaging access, and parallel sub-agents that finish multi-step work. PhiClaw adds a signed BAA, HIPAA-eligible infrastructure, and healthcare workflows, and it is managed for you.
Why can't my practice just use Grok Bot?
Because, as of October 2026, there is no published Business Associate Agreement covering Grok Bot, and HIPAA requires one before patient data reaches a vendor. The Bot also shares one set of logins across all tasks on a cloud computer run by Cursor.
Does PhiClaw make medical decisions?
No. PhiClaw runs practice operations. Licensed clinicians remain responsible for diagnosis, treatment, prescribing, and medical decisions.
How fast can we start?
Typically days, including free migration from your current EHR or CRM. Nothing to host or secure on your side.
Want the always-on AI employee, with the BAA already signed?
Book a 20-minute call