HIPAA-compliant AI tools: which models and apps sign a BAA

A BAA covers a named product, plan and feature set, not a brand. Of the 11 AI vendors listed here, 3 have a BAA route open to individual clinicians or any account (Amazon Bedrock, Doximity GPT, OpenEvidence). The other 8 depend on a specific plan, an admin setting or a sales contract. This page gives the verdict, plan and way to obtain the BAA for each. Consumer chat apps are never covered.

Short answer: which AI tools can touch PHI

• Yes: Amazon Bedrock, Doximity GPT, OpenEvidence.
• Conditional: Anthropic Claude, Fireflies.ai, Google Gemini, Grok, Microsoft Azure, Microsoft Copilot, OpenAI (ChatGPT and API), Perplexity.

The rule that decides most cases: the BAA must name the product and plan you use. Consumer chat apps and free tiers are not covered unless the vendor says so. Doximity GPT member accounts and OpenEvidence individual clinician accounts are the two stated exceptions in this roster.

Changes are logged under recent changes in vendor HIPAA status. The verification date is at the end of the page. For other software types, start from HIPAA-compliant software by category.

Comparison table: BAA by plan, how to get it, exclusions

Rows are ordered by verdict, then alphabetically. The type column separates assistants, model APIs and cloud AI platforms. Vendor detail pages are listed under Is it HIPAA compliant? All vendors.

Vendor	Type	Verdict	BAA from plan	How to obtain it
Amazon Bedrock	Cloud AI platform / model API	Yes	All AWS accounts	Review and accept the AWS BAA in AWS Artifact (AWS Management Console)
Doximity GPT	Assistant	Yes	Member (free)	Included with each member account; Enterprise BAAs via [email protected]
OpenEvidence	Assistant	Yes	Individual clinician accounts (standard BAA)	Standard BAA applies when a U.S. covered entity inputs PHI; customer-specific agreements for organizations
Anthropic Claude	Assistant and API	Conditional	Claude Enterprise (HIPAA enabled by the Primary Owner)	Enterprise: Primary Owner enables HIPAA in Organization settings > Data and privacy > HIPAA Compliance and accepts the click-to-accept BAA. API: Primary Owner signs a BAA and contacts the Anthropic account contact or Sales to enable it
Fireflies.ai	Meeting-notes assistant	Conditional	Enterprise	On request; sign the BAA on the BAA contract page in workspace settings and enable Private Storage
Google Gemini	Assistant and cloud API	Conditional	Workspace editions where Gemini Apps is a core service (listed below)	Workspace: super administrator accepts the HIPAA Business Associate Amendment in the Admin console. Google Cloud: accept the Google Cloud BAA in the Google Cloud console
Grok	Model API	Conditional	API (enterprise)	Complete the BAA Questionnaire at x.ai/legal/baa; xAI reviews and follows up
Microsoft Azure	Cloud AI platform	Conditional	All Azure customers under a volume licensing or online subscription agreement (no plan tiers)	No separate contract: executing the licensing agreement, which incorporates the Product Terms and the Data Protection Addendum (DPA), includes the HIPAA BAA. Text on the Service Trust Portal (aka.ms/baa)
Microsoft Copilot (Microsoft 365 Copilot)	Assistant	Conditional	Microsoft 365 Copilot Business (add-on, up to 300 users)	Included by default in the Microsoft DPA and Product Terms for organizations using work accounts; Copilot and Copilot Chat are listed among in-scope Office 365 commercial and GCC services
OpenAI ChatGPT and OpenAI API	Assistant and API	Conditional	ChatGPT for Healthcare	See assistants and developer sections below
Perplexity	Assistant	Conditional	Enterprise (Enterprise Pro / Enterprise Max)	Executed separately with Perplexity (contact sales); not self-serve

Pricing and controls

"Not published" means the vendor does not state it. It is not a negative.

Vendor	Pricing from	Encryption at rest	Audit log	SSO	SOC 2	Data residency
Amazon Bedrock	Not published	Yes	Yes	Not published	Yes	Not published
Doximity GPT	Free	Yes	Not published	Not published	Yes	Not published
OpenEvidence	Not published	Yes	Not published	Not published	Yes	Not published
Anthropic Claude	$20/seat/month billed annually (Enterprise, 20-seat minimum; usage billed at API rates)	Not published	Yes	Yes	Yes	Not published
Fireflies.ai	$39/seat/month billed annually (Enterprise)	Not published	Not published	Yes	Yes	Private Storage lets organizations choose where recordings and transcripts are stored
Google Gemini	€6.80/user/month (Workspace Business Starter, annual commitment)	Not published	Not published	Not published	Yes	Not published
Grok	Not published	Not published	Yes	Yes	Yes	Available for the API (enterprise controls)
Microsoft Azure	Not published	Not published	Not published	Not published	Yes	Not published
Microsoft Copilot	$18.00/user/month (Copilot Business add-on, paid yearly; list $21.00; requires an eligible Microsoft 365 subscription)	Yes	Yes	Not published	Not published	Covered by Microsoft 365 data residency commitments since March 1, 2024; EU Data Boundary for EU customers (Anthropic models excluded)
OpenAI	$0 for ChatGPT for Clinicians (individual verified US clinicians); organizations via sales (Enterprise/Healthcare) or API pay-as-you-go	Not published	Yes	Yes	Not published	Data residency options (ChatGPT for Healthcare / Enterprise)
Perplexity	$40/seat/month (Enterprise Pro)	Not published	Not published	Yes	Yes	Not published

OpenAI holds a SOC 2 Type 2 report covering 1 July 2025 to 30 June 2026 (Security, Availability, Confidentiality and Privacy criteria), downloadable by logged-in customers on its trust portal. Report type and period for the other vendors are not stated here.

HIPAA-compliant AI assistants and ChatGPT alternatives

For an everyday assistant, the question is which plan carries the BAA and who can accept it.

• OpenAI: ChatGPT for Healthcare carries the BAA. ChatGPT Enterprise, Edu and Healthcare go through sales. ChatGPT for Clinicians is a BAA signed in ChatGPT under Settings > Agreements. OpenAI lists six offerings that come with a BAA: ChatGPT for Healthcare, ChatGPT for Enterprise with Regulated Workspace, ChatGPT FedRAMP, ChatGPT for Clinicians, API with Modified Retention, and API FedRAMP with Modified Retention. The covered Enterprise product is ChatGPT Enterprise with Regulated Workspace. Excluded features: sharing workspace agents with agent-owned connections, internet access in Canvas and code blocks, browser use and network access for Work in the cloud, event-triggered scheduled tasks, Computer History, Codex in the cloud, Codex Security and improved memory. The BAA does not cover Codex Local client execution on customer machines either. Anything not listed as covered is not automatically covered.
• Anthropic Claude: Claude Enterprise. The Primary Owner enables HIPAA in Data and privacy settings and accepts a click-to-accept BAA. Excluded features: Cowork in the cloud, Dispatch, Claude Code cloud sessions, Claude Design, Slides and Docs (beta), Claude in Office (beta), published artifact pages, Skills (off by default), Claude Code via Bedrock, Google Cloud, Foundry, an LLM gateway or the VS Code and JetBrains extensions, third-party data flows through MCP connectors, Enterprise Search and Claude in Chrome, and the Claude Console.
• Microsoft 365 Copilot: Covered through the DPA and Product Terms for work accounts, with no separate contract described. The Copilot Business add-on is $18.00/user/month (yearly). It needs an eligible Microsoft 365 subscription and is limited to 300 users. Web search queries are not covered by the DPA or BAA.
• Gemini in Google Workspace: An administrator accepts the Workspace BAA. Gemini Apps must be a core service in your edition. Google's list: Business Starter, Business Standard, Business Plus, Enterprise Standard, Enterprise Plus, Essentials, Enterprise Essentials, Enterprise Essentials Plus, Frontline Starter/Standard/Plus, Nonprofits, and Education Fundamentals/Standard/Plus. Not covered: Gemini in Chrome, the Gemini app when accessed as an Additional Product (only the Core Service setting is covered), and other non-core services without a separate BAA.
• Perplexity Enterprise: Contact sales. The BAA is executed separately, and Enterprise Pro is $40/seat/month.
• Doximity GPT: The BAA is included with each member account at no cost. Organizations can request an Enterprise BAA at [email protected]. Individual members are covered on their own account.
• OpenEvidence: A standard BAA applies when a U.S. covered entity inputs PHI on an individual clinician account. Organizations get customer-specific agreements.

What is a HIPAA-compliant alternative to ChatGPT? ChatGPT itself has routes: ChatGPT for Healthcare, ChatGPT for Clinicians, or the API. If you need a different vendor, Claude Enterprise, Microsoft 365 Copilot, Gemini in a qualifying Workspace edition and Perplexity Enterprise each carry a BAA on the plans above. Doximity GPT and OpenEvidence are clinician-facing assistants. Each alternative has its own conditions, so compare the plan column, not the brand.

Clinical use: A BAA addresses how the vendor handles PHI. It does not validate output clinically. The covered entity still owns review of AI-drafted content, such as a patient-letter draft or a coding suggestion, and the policy governing it.

LLMs and AI platforms for developers

APIs and platforms differ mostly in how the BAA is signed.

• OpenAI API: An organization admin accepts the standard Business Associate and Healthcare Addendum self-serve in the API Platform (Settings > Organization > General > HIPAA compliance support > Enable). Self-serve requires an established API usage history. Otherwise email [email protected]. No enterprise agreement is needed.
• Claude API: The Primary Owner signs a BAA and contacts the Anthropic account contact or Sales to enable it. Negotiated or custom BAAs go through sales.
• Amazon Bedrock: The AWS BAA is accepted in AWS Artifact on any AWS account. Amazon Bedrock is on the AWS HIPAA Eligible Services list. Use only services and features on that list.
• Microsoft Azure: No separate contract. Executing the licensing agreement includes the BAA. Microsoft's public HIPAA pages do not state Azure OpenAI coverage, so confirm it against Microsoft's in-scope services list before use.
• Google Cloud (Gemini): Accept the Google Cloud BAA in the Google Cloud console under Privacy compliance and records.
• Grok API: Complete the BAA Questionnaire at x.ai/legal/baa. xAI reviews it and follows up.

A BAA on the model API does not cover the rest of your app. Hosting, logging, vector stores and monitoring each need their own BAA. Compare them under HIPAA-compliant hosting and HIPAA-compliant software development.

AI coding tools, evaluation platforms and frameworks: None are in the researched roster, so this page makes no claim about them. They are not yet researched.

What a BAA does not cover: typical exclusions

Read what a business associate agreement is first if the term is new to your team. In practice, these are the common carve-outs.

• Consumer apps and free tiers. Consumer ChatGPT, Claude, Gemini, Perplexity and Grok apps are not covered by the plans above.
• Feature-level exclusions. Enterprise tiers often exclude web search, memory and cloud agents. Treat any feature as excluded unless the vendor's documentation lists it as in scope. Per vendor:
  • OpenAI: web search and deep research are covered (using OpenAI's own index, no third-party search providers). Improved memory, Codex in the cloud and browser/network access for Work in the cloud are excluded.
  • Anthropic: Cowork in the cloud, Dispatch, Claude Code cloud sessions, Skills, MCP/connector third-party data flows, Claude in Chrome and Claude Console. For the API: Batch, Files (beta), Skills (beta), Code Execution, Computer Use (beta) and Web Fetch.
  • Google: Gemini in Chrome and the Gemini app as an Additional Product are not covered. Only Core Service Gemini settings are covered.
• Third-party integrations and external models. Most vendors do not document BAA coverage for AI agents and the external models they call. Connectors to other tools usually sit outside the BAA.
• Plan-dependent steps. Fireflies.ai's BAA requires Enterprise plus Private Storage. Skipping the Private Storage setting leaves a gap on a plan that otherwise has a BAA.
• Regional limits. In Microsoft 365 Copilot, the EU Data Boundary excludes Anthropic models.

Confirm in writing for any tool: whether your data is used for model training, retention and deletion periods, and which subprocessors host the models. HHS Office for Civil Rights' "Guidance on HIPAA & Cloud Computing" covers service level agreements on retention and disclosure limits and return of data, and notes that subcontractors of a cloud provider are also business associates. It does not address AI model training, so ask each vendor about training separately.

How to evaluate an AI tool before PHI goes in

Background on the term itself: what 'HIPAA compliant' actually means.

1. BAA in hand for the exact product and plan, signed or accepted before any PHI enters.
2. Training off on your data, confirmed in writing.
3. Retention and deletion settings you control and can document.
4. Access controls: roles, SSO and audit logs you can export. See HIPAA-compliant audit logging for logging tools that sign a BAA.
5. Subprocessors and model hosts named, including any external models.
6. Feature scope: web search, memory and agents off unless the vendor lists them as covered.

Cost factors, using only the published prices above: seat minimums (Claude Enterprise, 20 seats), add-on licensing (Copilot Business at $18.00 on top of a Microsoft 365 subscription, up to 300 users), per-seat tiers (Fireflies.ai Enterprise at $39, Perplexity Enterprise Pro at $40, Workspace Business Starter at €6.80), and usage billing (Claude Enterprise at API rates, OpenAI API pay-as-you-go). Several vendors publish no price, so budget from a quote.

Shared responsibility: Configuration, staff policy, training, access management and offboarding stay with the covered entity or business associate.

Related AI categories on this wiki

Pages for AI chatbots, AI scribes and AI transcription are not yet published. Meeting-note tools such as Fireflies.ai are conditional: Enterprise plan plus Private Storage.

For team chat with AI agents: Chanty, Inc., which publishes this site, is listed as a vendor in its own category. A BAA is available there from the Business plan, and AI agents are Enterprise only.

FAQ

Is ChatGPT HIPAA compliant?

Consumer ChatGPT is not covered by a BAA. A BAA is available through ChatGPT for Healthcare, ChatGPT Enterprise/Edu/Healthcare (contact sales), ChatGPT for Clinicians (signed in Settings > Agreements) and the API. Verdict: conditional.

What is a HIPAA-compliant alternative to ChatGPT?

Claude Enterprise, Microsoft 365 Copilot, Gemini in qualifying Workspace editions and Perplexity Enterprise each carry a BAA on specific plans. Doximity GPT and OpenEvidence cover clinician accounts. See the assistants section for conditions.

Does Claude sign a BAA, and on which plan?

Yes, on Claude Enterprise. The Primary Owner enables HIPAA in Organization settings and accepts the click-to-accept BAA. For the API, the Primary Owner signs a BAA and contacts Anthropic to enable it.

Is Google Gemini covered by Google's BAA?

Conditionally. In Workspace, Gemini Apps is covered in editions where it is a core service, once a super administrator accepts the HIPAA BAA in the Admin console. In Google Cloud, it is covered by the Google Cloud BAA. Not covered: Gemini in Chrome, the Gemini app when accessed as an Additional Product (only the Core Service setting is covered), and other non-core services without a separate BAA.

Does Microsoft 365 Copilot need a separate BAA?

Microsoft describes coverage as included by default in the Data Protection Addendum and Product Terms for work accounts, with no separate contract. Microsoft's documentation says organizational use of Copilot and Copilot Chat, signed in with a Microsoft Entra ID work account, is covered by the DPA and Product Terms with Microsoft as data processor, and supports HIPAA compliance for properly configured implementations. Web search queries are not covered by the DPA or BAA. Confirm your own licensing terms.

Can I use a free AI assistant with patient information?

Not unless the vendor says the free tier is covered. Of the vendors listed here, only Doximity GPT member accounts (free) and OpenEvidence individual clinician accounts have a BAA on individual accounts. Free tiers of the other consumer apps are not covered.

What does a BAA for an LLM API not cover?

It does not cover the rest of your stack: hosting, logging, vector stores, monitoring and third-party integrations each need their own BAA or fall outside it. It also does not cover features the vendor lists as excluded.

How do I build a HIPAA-compliant AI healthcare app?

Start with a model API under a signed BAA. Put the app on hosting that also signs a BAA, and sign BAAs for every other component that touches PHI. Configure access, audit logging and retention, and document staff policy. A BAA alone does not make the app compliant.

Are AI coding tools and LLM evaluation platforms covered by a BAA?

Not yet researched. No coding tool, evaluation platform or framework is in the current roster, so this page makes no statement about them.

How often is this page re-verified?

The fifty most-viewed vendors are re-checked every quarter and the rest at least once a year. A vendor is re-checked sooner when it changes plans or a reader reports a change. Changes are logged on the changes page.

Sources and last verification