HIPAA and LLMs: What Is Actually Possible

There is no such thing as a compliant model. There are business associate agreements, de-identification, and a set of questions to put to a vendor.