Checked October 23, 2026
BAA directory: which tools sign a HIPAA BAA
Plan by plan, from each vendor's own pages.
No app is HIPAA compliant on its own. A tool can hold patient data only on a plan where the vendor signs a Business Associate Agreement (BAA). This directory lists, for each tool, the plans its vendor says can carry a BAA and the plans that cannot.
Most searched
- Is Zoom HIPAA compliant?
- Is Google Drive HIPAA compliant?
- Is Gmail HIPAA compliant?
- Is Microsoft Teams HIPAA compliant?
- Is Microsoft 365 HIPAA compliant?
- Is Dropbox HIPAA compliant?
- Is Slack HIPAA compliant?
- Is Google Workspace HIPAA compliant?
- Is DocuSign HIPAA compliant?
- Is Otter HIPAA compliant?
- Is Notion HIPAA compliant?
- Is Calendly HIPAA compliant?
- Is Jotform HIPAA compliant?
- Is Google Forms HIPAA compliant?
- Is Salesforce HIPAA compliant?
- Is HubSpot HIPAA compliant?
- Is Mailchimp HIPAA compliant?
- Is Typeform HIPAA compliant?
- Is WhatsApp HIPAA compliant?
- Is Google Meet HIPAA compliant?
- Is Box HIPAA compliant?
- Is SurveyMonkey HIPAA compliant?
- Is Twilio HIPAA compliant?
- Is Amazon Web Services HIPAA compliant?
- Is Microsoft Azure HIPAA compliant?
- Is Zendesk HIPAA compliant?
- Is Google Voice HIPAA compliant?
- Is Smartsheet HIPAA compliant?
- Is Airtable HIPAA compliant?
- Is Asana HIPAA compliant?
- Is monday.com HIPAA compliant?
- Is Grammarly HIPAA compliant?
- Is Perplexity HIPAA compliant?
- Is Fireflies HIPAA compliant?
- Is Zoom AI Companion HIPAA compliant?
- Is DeepSeek HIPAA compliant?
- Is Grok HIPAA compliant?
- Is BastionGPT HIPAA compliant?
- Is CompliantChatGPT HIPAA compliant?
- Is ChatGPT HIPAA compliant?
- Is Claude HIPAA compliant?
- Is Gemini HIPAA compliant?
- Is Microsoft Copilot HIPAA compliant?
AI assistants
| Tool | BAA offered | Plans with a BAA | Plans without | Checked |
|---|---|---|---|---|
| Grammarly | Yes, on some plans | Grammarly for Business Enterprise | Pro, Free | |
| PerplexityPerplexity AI | Yes, on some plans | Enterprise Pro and Enterprise Max | Pro and Max (Perplexity Health) | |
| DeepSeekHangzhou DeepSeek Artificial Intelligence | No | None | DeepSeek apps, website, and related services | |
| GrokSpaceXSI | Yes, on some plans | xAI API | None listed | |
| BastionGPTBastion Intelligence | Yes, on some plans | Every plan | None listed | |
| CompliantChatGPTCompliantAI | Yes, on some plans | Any paid plan, Enterprise | None listed | |
| ChatGPTOpenAI | Yes, on some plans | Enterprise, Edu, ChatGPT for Healthcare, ChatGPT for Clinicians, API | Free, Go, Plus, Pro, Business, ChatGPT Health | |
| ClaudeAnthropic | Yes, on some plans | Enterprise, API | Free, Pro, Max, Team | |
| GeminiGoogle | Yes, on some plans | Gemini in Google Workspace, Gemini app with a Google Workspace work or school account, Gemini Enterprise (Google Cloud) | Gemini in Chrome | |
| Microsoft CopilotMicrosoft | Yes, on some plans | Microsoft Copilot and Microsoft Copilot Chat (organizational use) | None listed |
AI notetakers
| Tool | BAA offered | Plans with a BAA | Plans without | Checked |
|---|---|---|---|---|
| OtterOtter.ai | Yes, on some plans | Enterprise | Business, Pro, Basic (free) | |
| FirefliesFireflies.ai | Yes, on some plans | Enterprise | Business, Pro, Free | |
| Zoom AI CompanionZoom Communications | Yes, on some plans | Paid Zoom plans with a signed BAA (Pro, Business, Business Plus, Enterprise) | Basic (free) |
Video meetings
| Tool | BAA offered | Plans with a BAA | Plans without | Checked |
|---|---|---|---|---|
| ZoomZoom Communications | Yes, on some plans | Pro, Business, Business Plus, Enterprise | Basic (free) | |
| Google MeetGoogle | Yes, on some plans | Google Meet in Google Workspace | None listed |
Messaging
| Tool | BAA offered | Plans with a BAA | Plans without | Checked |
|---|---|---|---|---|
| Microsoft TeamsMicrosoft | Yes, on some plans | Microsoft Teams in Microsoft 365 and Office 365 commercial cloud, Microsoft Teams in Office 365 U.S. Government (GCC) | None listed | |
| SlackSlack Technologies | Yes, on some plans | Enterprise+ and Enterprise Grid | Business+, Pro, Free | |
| WhatsAppMeta | No | None | WhatsApp Business Platform |
| Tool | BAA offered | Plans with a BAA | Plans without | Checked |
|---|---|---|---|---|
| GmailGoogle | Yes, on some plans | Gmail in Google Workspace, Gemini features in Gmail (Help me write, contextual smart replies, side panel) | None listed |
File storage
| Tool | BAA offered | Plans with a BAA | Plans without | Checked |
|---|---|---|---|---|
| Google DriveGoogle | Yes, on some plans | Google Drive in Google Workspace (including Docs, Sheets, Slides, Forms, and Vids) | None listed | |
| Dropbox | Yes, on some plans | Standard, Advanced, Enterprise | Plus, Basic (free) | |
| Box | Yes, on some plans | Enterprise, Enterprise Plus, Enterprise Advanced | Personal, Starter, Business |
Productivity and project tools
| Tool | BAA offered | Plans with a BAA | Plans without | Checked |
|---|---|---|---|---|
| Microsoft 365Microsoft | Yes, on some plans | Microsoft 365 and Office 365 commercial cloud, Office 365 U.S. Government (GCC) | None listed | |
| Google WorkspaceGoogle | Yes, on some plans | Google Workspace (organization subscription) | Third-party apps and add-ons | |
| NotionNotion Labs | Yes, on some plans | Enterprise | Business, Plus, Free | |
| Smartsheet | Yes, on some plans | Enterprise Plan | Pro Plan, Business Plan, Trials | |
| Airtable | Yes, on some plans | Enterprise Scale | None listed | |
| Asana | Yes, on some plans | Enterprise+ | Personal | |
| monday.com | Yes, on some plans | Enterprise | None listed |
Forms and surveys
| Tool | BAA offered | Plans with a BAA | Plans without | Checked |
|---|---|---|---|---|
| JotformJotform Inc. | Yes, on some plans | Gold, Enterprise | Starter, Bronze, Silver | |
| Google FormsGoogle | Yes, on some plans | Google Forms in Google Workspace | None listed | |
| Typeform | Yes, on some plans | Enterprise | None listed | |
| SurveyMonkey | Yes, on some plans | Enterprise | None listed |
Scheduling
| Tool | BAA offered | Plans with a BAA | Plans without | Checked |
|---|---|---|---|---|
| Calendly | No | None | Free, Standard, Teams, Enterprise |
E-signature
| Tool | BAA offered | Plans with a BAA | Plans without | Checked |
|---|---|---|---|---|
| DocuSignDocusign, Inc. | Yes, on some plans | Docusign IAM | None listed |
Marketing email
| Tool | BAA offered | Plans with a BAA | Plans without | Checked |
|---|---|---|---|---|
| Mailchimp | No | None | Free, Essentials, Standard, Premium |
CRM
| Tool | BAA offered | Plans with a BAA | Plans without | Checked |
|---|---|---|---|---|
| Salesforce | Yes, on some plans | Sales Cloud, Service Cloud, Health Cloud | None listed | |
| HubSpotHubSpot, Inc. | Yes, on some plans | Enterprise (Smart CRM, Marketing Hub, Sales Hub, Service Hub, Content Hub, Data Hub, Revenue Hub) | None listed |
Phone and SMS
| Tool | BAA offered | Plans with a BAA | Plans without | Checked |
|---|---|---|---|---|
| Twilio | Yes, on some plans | Security Edition, Enterprise Edition | None listed | |
| Google VoiceGoogle | Yes, on some plans | Google Voice in Google Workspace (managed users only) | None listed |
Customer support
| Tool | BAA offered | Plans with a BAA | Plans without | Checked |
|---|---|---|---|---|
| Zendesk | Yes, on some plans | Zendesk Suite Professional, Zendesk Suite Enterprise, Zendesk Enterprise Support | None listed |
Cloud platforms
| Tool | BAA offered | Plans with a BAA | Plans without | Checked |
|---|---|---|---|---|
| Amazon Web ServicesAmazon Web Services (AWS) | Yes, on some plans | AWS account designated as a HIPAA account | None listed | |
| Microsoft AzureMicrosoft | Yes, on some plans | In-scope Azure services | None listed |
How this directory is built
Each row comes from the vendor's own help, legal, or pricing page. Open a tool for the quote behind every plan. A tool is listed only when every row quotes the vendor. Vendors change plans and terms, so check the linked page before you sign. A BAA is necessary, not sufficient: your team still needs access controls, audit logs, and minimum-necessary use. What makes a chatbot HIPAA compliant covers the rest.
Rivvi
HIPAA BAA included
Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA, e-signed in the app before any patient data moves. The free personal plan is public information only.
Questions
What is a BAA?
A Business Associate Agreement is the contract HIPAA requires before a vendor creates, receives, keeps, or sends protected health information for a covered entity. It sets how the vendor protects the data and reports a breach.
Which tools in this directory offer a BAA?
On at least one plan, per the vendor: Zoom, Google Drive, Gmail, Microsoft Teams, Microsoft 365, Dropbox, Slack, Google Workspace, DocuSign, Otter, Notion, Jotform, Google Forms, Salesforce, HubSpot, Typeform, Google Meet, Box, SurveyMonkey, Twilio, Amazon Web Services, Microsoft Azure, Zendesk, Google Voice, Smartsheet, Airtable, Asana, monday.com, Grammarly, Perplexity, Fireflies, Zoom AI Companion, Grok, BastionGPT, CompliantChatGPT, ChatGPT, Claude, Gemini, Microsoft Copilot. Open a tool for which plan and what condition applies.
Which tools here do not offer a BAA?
Per the vendor's own pages: Calendly, Mailchimp, WhatsApp, DeepSeek.
Is a tool HIPAA compliant once the BAA is signed?
Not by itself. The BAA covers the plan and features the vendor lists. Your team still has to configure access, keep audit logs, and share only the minimum necessary.
Does Rivvi sign a BAA?
Yes. Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA, e-signed in the app before any patient data moves. The free personal plan is public information only.
Related
Source: each vendor's own pages, linked on each tool's page. Checked . Last updated . How Rivvi sources data. Spot an error? hello@rivvi.ai.
Free to start. Most teams are using it the same day.
Get started for free