CSAM and BAA for medical data

Anyone have any experience with BAA and passing images to the responses API?

It sort of indicated it does not do data retention but has a bullet for images that for what ever reason gets flagged for CSAM review.

I have reached out to the BAA email, sales and supports and all I ever get our BOT responses telling me to try one of the other 2 spots.

I simply want to know if the CSAM review is covered under the BAA aggrement?

Its just a bounce around of bots. I cannot get a human to answer a question.

Maybe someone here knows