BAA guide

Is BastionGPT HIPAA compliant?

Plan by plan, from Bastion Intelligence's own pages.

Only on a plan where the vendor signs a BAA. BastionGPT is not HIPAA compliant on its own. Every plan: BAA available. BastionGPT's help center says every plan, including API access, includes its BAA, which you agree to electronically when you accept the terms at signup. A countersigned DocuSign copy is available on request, and Enterprise customers can ask for a custom BAA.

Checked October 23, 2026 against BastionGPT's own pages, linked in the table.

Which BastionGPT plans sign a BAA

Plan	BAA	Condition	What the vendor page says
Every plan	BAA available	BastionGPT's help center says every plan, including API access, includes its BAA, which you agree to electronically when you accept the terms at signup. A countersigned DocuSign copy is available on request, and Enterprise customers can ask for a custom BAA.	The facts: every BastionGPT plan includes our HIPAA Business Associate Agreement, you agreed to it electronically at signup, and a countersigned copy is available on request as described above.support.bastiongpt.com

Training, retention, and access logs

Model training: BastionGPT's help center says its terms of use commit it to never use customer data to train AI models.
Retention: BastionGPT's security page says data is kept for up to 30 days in a secure audit vault, and users can delete items or all data immediately.
Access logs: BastionGPT's security page says audit logs are kept and monitored internally and can be requested by the customer, with automated data feeds available on Enterprise plans.

Rivvi

HIPAA BAA included

Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA, e-signed in the app before any patient data moves. The free personal plan is public information only.

Questions

Does BastionGPT include a BAA?

BastionGPT's help center says every plan includes its HIPAA Business Associate Agreement, and that you agree to it electronically when you accept the terms at signup.

Can I get a signed copy of the BastionGPT BAA?

Yes. BastionGPT's help center says a countersigned copy is available through DocuSign on request, and that Enterprise customers can ask for a custom or redlined BAA.

Does the BastionGPT API have the same coverage?

BastionGPT's help center says accepting the terms when you register for API access brings in the same HIPAA agreements that cover its other services. Rivvi is an AI workspace for healthcare teams. Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA.

Source: Bastion Intelligence's own pages, linked in the table. Checked October 23, 2026. Last updated October 23, 2026. How Rivvi sources data. Spot an error? hello@rivvi.ai.

Free to start. Most teams are using it the same day.

Get started for free