If you’re a solo psychologist, therapist, or small healthcare provider, you’ve probably heard about Dragon Copilot—Microsoft’s AI-powered voice assistant that helps streamline clinical documentation. It sounds like a dream: talk, and your notes are done. But when you try to buy it, you hit a wall: you can’t just click and purchase it online like you did with Outlook years ago.
So, what’s going on?
Why You Need to Buy Through a Microsoft Reseller
Dragon Copilot isn’t sold directly to small businesses or solo providers. Instead, Microsoft requires you to purchase it through a Microsoft reseller (like us). Why? Because this isn’t just software—it’s a cloud-based service that handles sensitive health data. That means it needs to be set up and managed with care.
Think of it like this: buying Dragon Copilot is less like buying a boxed copy of Word and more like setting up a secure server. There’s configuration, security, and compliance to think about. That’s where we come in—to help you get it right.
HIPAA Compliance: It’s Not Just About the Software
HIPAA compliance isn’t automatic whether you’re using Dragon Copilot or Microsoft 365. Microsoft provides the tools, but you’re responsible for how they’re used. This is what’s called the shared responsibility model—we’ve written more about that on our blog.
Here’s what you need to do on your end:
- Sign a Business Associate Agreement (BAA) with Microsoft
- Enable security features like multi-factor authentication (MFA), data loss prevention (DLP), and encryption
- Use Microsoft Compliance Manager to assess your HIPAA readiness
- Document your policies and procedures—even if you’re a team of one
We help our clients configure these settings, so they’re not just compliant—they’re confident.
What About Microsoft 365 E5 Health Edition?
You may have heard about the Microsoft 365 E5 Health Industry Edition. It’s powerful but designed for larger organizations—it requires at least 100 users and a 3-year commitment. Microsoft 365 Business Premium is a better fit for most solo or small practices. It’s HIPAA-capable when configured correctly—and yes, we help with that too.
Bottom Line
You don’t need a big IT team to use Dragon Copilot or Microsoft 365 securely, but you need awareness and support. That’s why Microsoft routes these tools through resellers: to ensure you’re not left guessing when protecting your patients’ data.
If you’re ready to bring AI into your practice correctly, we’re here to help.
Innovative Solutions. Practical Software. Friendly Support.
Schedule a call | View Upcoming Events | Access our TechHouse Library of Articles
