BAA guide
Is BastionGPT HIPAA compliant?
Plan by plan, from BastionGPT's own pages.
Only on a plan where the vendor signs a BAA. BastionGPT is not HIPAA compliant on its own. Every plan: BAA available. BastionGPT's help center says every plan, including API access, includes its BAA, which you agree to electronically when you accept the terms at signup. A countersigned DocuSign copy is available on request, and Enterprise customers can ask for a custom BAA.
Checked against BastionGPT's own pages, linked in the table.
Which BastionGPT plans sign a BAA
| Plan | BAA | Condition | What the vendor page says |
|---|---|---|---|
| Every plan | BAA available | BastionGPT's help center says every plan, including API access, includes its BAA, which you agree to electronically when you accept the terms at signup. A countersigned DocuSign copy is available on request, and Enterprise customers can ask for a custom BAA. | The facts: every BastionGPT plan includes our HIPAA Business Associate Agreement, you agreed to it electronically at signup, and a countersigned copy is available on request as described above.support.bastiongpt.com |
Training, retention, and access logs
- Model training
- BastionGPT's help center says its terms of use commit it to never use customer data to train AI models.
- Retention
- BastionGPT's security page says data is kept for up to 30 days in a secure audit vault, and users can delete items or all data immediately.
- Access logs
- BastionGPT's security page says audit logs are kept and monitored internally and can be requested by the customer, with automated data feeds available on Enterprise plans.
Rivvi
HIPAA BAA included
A HIPAA BAA is included on every plan, Free included.
Questions
Does BastionGPT include a BAA?
BastionGPT's help center says every plan includes its HIPAA Business Associate Agreement, and that you agree to it electronically when you accept the terms at signup.
Can I get a signed copy of the BastionGPT BAA?
Yes. BastionGPT's help center says a countersigned copy is available through DocuSign on request, and that Enterprise customers can ask for a custom or redlined BAA.
Does the BastionGPT API have the same coverage?
BastionGPT's help center says accepting the terms when you register for API access brings in the same HIPAA agreements that cover its other services. Rivvi is a free AI workspace for healthcare teams, and a HIPAA BAA is included.
Free to start. Most teams are using it the same day.
Get started for free