Does OpenAI sign a BAA for ChatGPT?

Yes, for some products. OpenAI lists ChatGPT for Healthcare, ChatGPT for Enterprise with a Regulated Workspace, ChatGPT for Clinicians, and the API with Modified Retention as HIPAA eligible with a BAA. A sales-managed Edu account can get a BAA through OpenAI sales. OpenAI says it does not offer a BAA for ChatGPT Business.

Is the free version of ChatGPT HIPAA compliant?

Free, Go, Plus, and Pro are not on OpenAI's list of HIPAA eligible products, so there is no BAA for them. Health in ChatGPT is a consumer feature on those same plans and is not on the list either.

Can an individual clinician get a BAA for ChatGPT?

Yes. ChatGPT for Clinicians is for verified U.S. physicians, nurse practitioners, physician assistants, and pharmacists, who can sign a BAA for their own workspace under Settings > Agreements. Front desk staff, billers, and practice managers are not eligible for that plan.

Which ChatGPT products does OpenAI cover for patient data?

OpenAI's help center points organizations that need one BAA for many users to ChatGPT for Healthcare, which it says clinical, administrative, and operational staff can all use. ChatGPT for Enterprise is eligible only with a Regulated Workspace. Rivvi is an AI workspace for healthcare teams. Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA.

BAA guide

Is ChatGPT HIPAA compliant?

Only on a plan where the vendor signs a BAA. ChatGPT is not HIPAA compliant on its own.

Checked October 23, 2026 against ChatGPT's own pages, linked in the table.

What the vendor says about HIPAA: Says it supports HIPAA compliance under a BAA. OpenAI makes the following HIPAA eligible products available with a Business Associates Agreement (BAA): help.openai.com
BAA terms published: Yes. Enterprise; Edu; ChatGPT for Healthcare; ChatGPT for Clinicians; API. help.openai.com. Checked October 23, 2026.

Which ChatGPT plans sign a BAA

Free
BAA available
No BAA
How to get it
Not on OpenAI's list of HIPAA eligible products, which names ChatGPT for Healthcare, ChatGPT for Enterprise with Regulated Workspace, ChatGPT FedRAMP, ChatGPT for Clinicians, and the API with Modified Retention.
Price
Not stated publicly
What the vendor page says
OpenAI makes the following HIPAA eligible products available with a Business Associates Agreement (BAA):help.openai.com
Go
BAA available
No BAA
How to get it
Not on OpenAI's list of HIPAA eligible products, which names ChatGPT for Healthcare, ChatGPT for Enterprise with Regulated Workspace, ChatGPT FedRAMP, ChatGPT for Clinicians, and the API with Modified Retention.
Price
Not stated publicly
What the vendor page says
OpenAI makes the following HIPAA eligible products available with a Business Associates Agreement (BAA):help.openai.com
Plus
BAA available
No BAA
How to get it
Not on OpenAI's list of HIPAA eligible products, which names ChatGPT for Healthcare, ChatGPT for Enterprise with Regulated Workspace, ChatGPT FedRAMP, ChatGPT for Clinicians, and the API with Modified Retention.
Price
Not stated publicly
What the vendor page says
OpenAI makes the following HIPAA eligible products available with a Business Associates Agreement (BAA):help.openai.com
Pro
BAA available
No BAA
How to get it
Not on OpenAI's list of HIPAA eligible products, which names ChatGPT for Healthcare, ChatGPT for Enterprise with Regulated Workspace, ChatGPT FedRAMP, ChatGPT for Clinicians, and the API with Modified Retention.
Price
Not stated publicly
What the vendor page says
OpenAI makes the following HIPAA eligible products available with a Business Associates Agreement (BAA):help.openai.com
Business
BAA available
No BAA
How to get it
None stated
Price
Not stated publicly
What the vendor page says
We do not offer a BAA for ChatGPT Business.help.openai.com
Enterprise
BAA available
BAA only if the condition is met
How to get it
Only with a Regulated Workspace.
Price
Not stated publicly
What the vendor page says
OpenAI makes the following HIPAA eligible products available with a Business Associates Agreement (BAA): ... ChatGPT for Enterprise with Regulated Workspacehelp.openai.com
Edu
BAA available
BAA only if the condition is met
How to get it
Only for a sales-managed Edu account, with the BAA arranged through OpenAI sales.
Price
Not stated publicly
What the vendor page says
For a BAA for a sales-managed ChatGPT Enterprise or Edu account, contact sales.help.openai.com
ChatGPT for Healthcare
BAA available
BAA available
How to get it
None stated
Price
Not stated publicly
What the vendor page says
OpenAI makes the following HIPAA eligible products available with a Business Associates Agreement (BAA): ChatGPT for Healthcarehelp.openai.com
ChatGPT for Clinicians
BAA available
BAA only if the condition is met
How to get it
Only for individual verified U.S. clinicians (physicians, nurse practitioners, physician assistants, and pharmacists), who sign the BAA themselves in Settings > Agreements.
Price
Not stated publicly
What the vendor page says
Eligible individual clinicians can review and sign a Business Associate Agreement (BAA) for their ChatGPT for Clinicians workspace in ChatGPT under Settings > Agreements.help.openai.com
ChatGPT Health
BAA available
No BAA
How to get it
Health is a consumer feature for Free, Go, Plus, and Pro users and is not on OpenAI's list of HIPAA eligible products.
Price
Not stated publicly
What the vendor page says
Health is available to eligible, logged-in ChatGPT Free, Go, Plus, and Pro users in the U.S.help.openai.com
API
BAA available
BAA only if the condition is met
How to get it
Requires an executed OpenAI Business Associate and Healthcare Addendum, and PHI may be processed only on BAA-eligible endpoints once the org is provisioned for it.
Price
Not stated publicly
What the vendor page says
For customers who have executed an OpenAI Business Associate and Healthcare Addendum, once your org ID is provisioned with Private Retention with Private Safety Processing, BAA-eligible endpoints can be used for processing PHI, even if data is retained.developers.openai.com

Plan	BAA available	How to get it	Price	What the vendor page says
Free	No BAA	Not on OpenAI's list of HIPAA eligible products, which names ChatGPT for Healthcare, ChatGPT for Enterprise with Regulated Workspace, ChatGPT FedRAMP, ChatGPT for Clinicians, and the API with Modified Retention.	Not stated publicly	OpenAI makes the following HIPAA eligible products available with a Business Associates Agreement (BAA):help.openai.com
Go	No BAA	Not on OpenAI's list of HIPAA eligible products, which names ChatGPT for Healthcare, ChatGPT for Enterprise with Regulated Workspace, ChatGPT FedRAMP, ChatGPT for Clinicians, and the API with Modified Retention.	Not stated publicly	OpenAI makes the following HIPAA eligible products available with a Business Associates Agreement (BAA):help.openai.com
Plus	No BAA	Not on OpenAI's list of HIPAA eligible products, which names ChatGPT for Healthcare, ChatGPT for Enterprise with Regulated Workspace, ChatGPT FedRAMP, ChatGPT for Clinicians, and the API with Modified Retention.	Not stated publicly	OpenAI makes the following HIPAA eligible products available with a Business Associates Agreement (BAA):help.openai.com
Pro	No BAA	Not on OpenAI's list of HIPAA eligible products, which names ChatGPT for Healthcare, ChatGPT for Enterprise with Regulated Workspace, ChatGPT FedRAMP, ChatGPT for Clinicians, and the API with Modified Retention.	Not stated publicly	OpenAI makes the following HIPAA eligible products available with a Business Associates Agreement (BAA):help.openai.com
Business	No BAA	None stated	Not stated publicly	We do not offer a BAA for ChatGPT Business.help.openai.com
Enterprise	BAA only if the condition is met	Only with a Regulated Workspace.	Not stated publicly	OpenAI makes the following HIPAA eligible products available with a Business Associates Agreement (BAA): ... ChatGPT for Enterprise with Regulated Workspacehelp.openai.com
Edu	BAA only if the condition is met	Only for a sales-managed Edu account, with the BAA arranged through OpenAI sales.	Not stated publicly	For a BAA for a sales-managed ChatGPT Enterprise or Edu account, contact sales.help.openai.com
ChatGPT for Healthcare	BAA available	None stated	Not stated publicly	OpenAI makes the following HIPAA eligible products available with a Business Associates Agreement (BAA): ChatGPT for Healthcarehelp.openai.com
ChatGPT for Clinicians	BAA only if the condition is met	Only for individual verified U.S. clinicians (physicians, nurse practitioners, physician assistants, and pharmacists), who sign the BAA themselves in Settings > Agreements.	Not stated publicly	Eligible individual clinicians can review and sign a Business Associate Agreement (BAA) for their ChatGPT for Clinicians workspace in ChatGPT under Settings > Agreements.help.openai.com
ChatGPT Health	No BAA	Health is a consumer feature for Free, Go, Plus, and Pro users and is not on OpenAI's list of HIPAA eligible products.	Not stated publicly	Health is available to eligible, logged-in ChatGPT Free, Go, Plus, and Pro users in the U.S.help.openai.com
API	BAA only if the condition is met	Requires an executed OpenAI Business Associate and Healthcare Addendum, and PHI may be processed only on BAA-eligible endpoints once the org is provisioned for it.	Not stated publicly	For customers who have executed an OpenAI Business Associate and Healthcare Addendum, once your org ID is provisioned with Private Retention with Private Safety Processing, BAA-eligible endpoints can be used for processing PHI, even if data is retained.developers.openai.com

Price is not stated publicly on the vendor pages checked October 23, 2026.

Training, retention, and access logs

Model training: Per OpenAI, content shared with ChatGPT for Healthcare or ChatGPT for Clinicians is not used to train OpenAI's models.
Retention: Per OpenAI, ChatGPT for Healthcare includes data retention controls. OpenAI's API docs say BAA-eligible endpoints can process PHI once the org is provisioned with Private Retention with Private Safety Processing, even if data is retained.
Access logs: Per OpenAI, ChatGPT for Healthcare includes audit logs.

Who each plan covers

Clinicians
ChatGPT for Healthcare
Covered
ChatGPT for Clinicians
Covered
Pharmacists
ChatGPT for Healthcare
Covered
ChatGPT for Clinicians
Covered
Front desk and MAs
ChatGPT for Healthcare
Covered
ChatGPT for Clinicians
Not covered
Billers and coders
ChatGPT for Healthcare
Covered
ChatGPT for Clinicians
Not covered
Practice managers
ChatGPT for Healthcare
Covered
ChatGPT for Clinicians
Not covered

Role	ChatGPT for Healthcare	ChatGPT for Clinicians
Clinicians	Covered	Covered
Pharmacists	Covered	Covered
Front desk and MAs	Covered	Not covered
Billers and coders	Covered	Not covered
Practice managers	Covered	Not covered

What to use instead if your plan isn't covered

These tools sign a BAA on at least one plan. Each row links that vendor's own page.

Claude
Says it supports HIPAA compliance under a BAA. Enterprise; API. support.claude.com
Gemini
Says it supports HIPAA compliance under a BAA. Gemini App (excluding Gemini in Google Chrome); Gemini in Google Workspace; Gemini Mac App; Gemini Enterprise (Google Cloud). docs.cloud.google.com
Microsoft Copilot
Says it supports HIPAA compliance under a BAA. Microsoft Copilot and Microsoft Copilot Chat (organizational use). learn.microsoft.com
BastionGPT
Says it's HIPAA compliant. Every plan, including the free trial. bastiongpt.com
CompliantChatGPT
Says it's HIPAA compliant. Any paid plan; Enterprise. compliantchatgpt.com
Doximity GPT
Says it's HIPAA compliant. Free verified account; Enterprise. doximity.com
OpenEvidence
Says it's HIPAA compliant. Covered entity on the standard terms; Institutional MSA. openevidence.com
Rivvi
Says it's HIPAA compliant. Free organization plan and every paid plan. rivvi.ai/security

Rivvi

HIPAA BAA included

Rivvi's free organization plan (you and two colleagues) includes a HIPAA BAA. The free personal plan is public information only.

Questions

Is any version of ChatGPT HIPAA compliant?

Only on certain plans. Free, Go, Plus, and Pro: no BAA. Not on OpenAI's list of HIPAA eligible products, which names ChatGPT for Healthcare, ChatGPT for Enterprise with Regulated Workspace, ChatGPT FedRAMP, ChatGPT for Clinicians, and the API with Modified Retention. Business: no BAA. Enterprise: Only with a Regulated Workspace. Edu: Only for a sales-managed Edu account, with the BAA arranged through OpenAI sales. ChatGPT for Healthcare: BAA available. ChatGPT for Clinicians: Only for individual verified U.S. clinicians (physicians, nurse practitioners, physician assistants, and pharmacists), who sign the BAA themselves in Settings > Agreements. ChatGPT Health: no BAA. Health is a consumer feature for Free, Go, Plus, and Pro users and is not on OpenAI's list of HIPAA eligible products. API: Requires an executed OpenAI Business Associate and Healthcare Addendum, and PHI may be processed only on BAA-eligible endpoints once the org is provisioned for it.

How can I make ChatGPT HIPAA compliant?

You cannot turn the free or personal plans into a covered plan. Free, Go, Plus, and Pro: no BAA. Not on OpenAI's list of HIPAA eligible products, which names ChatGPT for Healthcare, ChatGPT for Enterprise with Regulated Workspace, ChatGPT FedRAMP, ChatGPT for Clinicians, and the API with Modified Retention. Business: no BAA. Enterprise: Only with a Regulated Workspace. Edu: Only for a sales-managed Edu account, with the BAA arranged through OpenAI sales. ChatGPT for Healthcare: BAA available. ChatGPT for Clinicians: Only for individual verified U.S. clinicians (physicians, nurse practitioners, physician assistants, and pharmacists), who sign the BAA themselves in Settings > Agreements. ChatGPT Health: no BAA. Health is a consumer feature for Free, Go, Plus, and Pro users and is not on OpenAI's list of HIPAA eligible products. API: Requires an executed OpenAI Business Associate and Healthcare Addendum, and PHI may be processed only on BAA-eligible endpoints once the org is provisioned for it.

Is putting patient info into ChatGPT a HIPAA violation?

OpenAI's page says the free, Go, Plus, Pro, and Business plans do not offer a BAA. Putting patient information into a plan with no BAA is outside that agreement. ChatGPT for Healthcare is the plan OpenAI says includes one.

Does OpenAI have a HIPAA compliant version?

Free, Go, Plus, and Pro: no BAA. Not on OpenAI's list of HIPAA eligible products, which names ChatGPT for Healthcare, ChatGPT for Enterprise with Regulated Workspace, ChatGPT FedRAMP, ChatGPT for Clinicians, and the API with Modified Retention. Business: no BAA. Enterprise: Only with a Regulated Workspace. Edu: Only for a sales-managed Edu account, with the BAA arranged through OpenAI sales. ChatGPT for Healthcare: BAA available. ChatGPT for Clinicians: Only for individual verified U.S. clinicians (physicians, nurse practitioners, physician assistants, and pharmacists), who sign the BAA themselves in Settings > Agreements. ChatGPT Health: no BAA. Health is a consumer feature for Free, Go, Plus, and Pro users and is not on OpenAI's list of HIPAA eligible products. API: Requires an executed OpenAI Business Associate and Healthcare Addendum, and PHI may be processed only on BAA-eligible endpoints once the org is provisioned for it.

Source: OpenAI's own pages, linked in the table. Checked October 23, 2026. Last updated October 23, 2026. How Rivvi sources data. Spot an error? hello@rivvi.ai.