BAA guide
Is DeepSeek HIPAA compliant?
Plan by plan, from DeepSeek's own pages.
No. DeepSeek does not offer a BAA on the plans Rivvi checked. DeepSeek apps, website, and related services: no BAA. DeepSeek's privacy policy says its services are not designed to process sensitive data such as health information and asks users not to provide it. It also says personal data is stored in the People's Republic of China. No BAA offer appears on the pages checked.
Checked against DeepSeek's own pages, linked in the table.
Which DeepSeek plans sign a BAA
| Plan | BAA | Condition | What the vendor page says |
|---|---|---|---|
| DeepSeek apps, website, and related services | No BAA | DeepSeek's privacy policy says its services are not designed to process sensitive data such as health information and asks users not to provide it. It also says personal data is stored in the People's Republic of China. No BAA offer appears on the pages checked. | The Services are not designed or intended to process sensitive Personal Data (e.g., ... health ...). We do not ask for, and you should not provide sensitive Personal Data to the Services, whether about yourself or other individuals.cdn.deepseek.com |
Training, retention, and access logs
- Model training
- DeepSeek's privacy policy says it uses personal data to train and improve its models, and lists opting out of that use among the privacy rights that may be available to you.
- Retention
- DeepSeek's privacy policy says it keeps account, input, and payment data for as long as you have an account.
Rivvi
HIPAA BAA included
Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA, e-signed in the app before any patient data moves. The free personal plan is public information only.
Questions
Does DeepSeek offer a BAA?
The DeepSeek privacy policy and terms Rivvi checked do not offer a BAA. The privacy policy says the services are not designed to process sensitive data such as health information and asks users not to provide it.
Where does DeepSeek store my data?
DeepSeek's privacy policy says it directly collects, processes, and stores personal data in the People's Republic of China.
Does DeepSeek train on what I type?
DeepSeek's privacy policy says it uses personal data to train and improve its models, and lists opting out of that use among the privacy rights that may be available to you. Rivvi is a free AI workspace for healthcare teams, and a HIPAA BAA is included.
Free to start. Most teams are using it the same day.
Get started for free