At our August Zoom social mixer, the conversation focused on inbound email security filtering logic, ExecProtect, and the growing compliance complexity of AI adoption in healthcare.

 

What happened: 

The August social mixer was an unmoderated discussion among healthcare IT professionals and marketers. We covered the security implications of Paubox's recent allow list change, quarantine management friction, ExecProtect and AI meeting tools and ticketing systems, inbound mail log limitations, the return of geofencing, new Paubox Forms features, and how healthcare organizations are navigating BAA coverage gaps with AI tools.
Related: Convert PDFs into HIPAA Compliant Forms

 

Our takeaways:

  • Strong consensus emerged that high-confidence phishing should always be blocked regardless of allow list status, and that customer-configurable filtering logic is the preferred long-term solution. 

  • AI meeting summary tools, payroll platforms, and ticketing systems like Jira and Ninja send emails using employee display names, which can generate false positives.

  • Geofencing is a popular security feature with customers.

  • Paubox Forms now supports an MCP connector, API integration, and PDF-to-form conversion, allowing forms to be created directly from AI tools like Claude or ChatGPT, and existing PDF fillable forms to be converted automatically.

  • AI adoption in healthcare is accelerating. 64% of survey respondents have built or automated something with AI, but BAA coverage gaps are a significant compliance risk.

  • Most major AI providers' BAAs cover only chat functionality, not API or connector usage. Microsoft Foundry and AWS Bedrock were highlighted as ways to access AI tools with PHI under existing Microsoft or AWS BAAs.

  • Free security tools like SCuBA and Prowler were recommended as viable alternatives to expensive third-party security assessments, with one attendee noting a vendor quoted $50,000 for an assessment these tools can replicate at no cost.

    .

The bottom line: Customers count on Paubox to help keep their emails HIPAA compliant and save time managing inbound email security challenges.

See also: Our playbook for Zoom social mixers

See also: HIPAA Compliant Email: The Definitive Guide