← Free tools
Free tool
Can I use this AI tool with patient data?
Pick a tool and the plan your team uses. The checker shows whether the vendor signs a HIPAA Business Associate Agreement (BAA) for that plan, what's excluded, and the vendor page we checked. A BAA covers specific plans and features, so a tool that is eligible on its enterprise plan is not covered on a personal or small-business account.
This tool runs in your browser. Nothing you enter is sent to Rivvi or stored.
Unverified
BastionGPT, Every plan
Unverified until Rivvi checks the vendor page. BAA available. BastionGPT's help center says every plan includes a BAA, agreed to electronically at signup, before patient information is entered. A countersigned copy is available on request.
Source: support.bastiongpt.com
Last checked October 14, 2026
| Plan | Notes | Source | ||
|---|---|---|---|---|
| BastionGPT | Every plan | Unverified | Unverified until Rivvi checks the vendor page. BAA available. BastionGPT's help center says every plan includes a BAA, agreed to electronically at signup, before patient information is entered. A countersigned copy is available on request. | support.bastiongpt.com |
| ChatGPT | Free | Unverified | Unverified until Rivvi checks the vendor page. No BAA | help.openai.com |
| ChatGPT | Plus | Unverified | Unverified until Rivvi checks the vendor page. No BAA | help.openai.com |
| ChatGPT | Pro | Unverified | Unverified until Rivvi checks the vendor page. No BAA | help.openai.com |
| ChatGPT | Business | Unverified | Unverified until Rivvi checks the vendor page. No BAA | help.openai.com |
| ChatGPT | Enterprise | Unverified | Unverified until Rivvi checks the vendor page. BAA only if the condition is met. Only with a Regulated Workspace. | help.openai.com |
| ChatGPT | ChatGPT for Healthcare | Unverified | Unverified until Rivvi checks the vendor page. BAA only if the condition is met. Through OpenAI sales. | help.openai.com |
| ChatGPT | ChatGPT for Clinicians | Unverified | Unverified until Rivvi checks the vendor page. BAA only if the condition is met. Free for verified MDs, NPs, PAs, and pharmacists only. | help.openai.com |
| ChatGPT | ChatGPT Health | Unverified | Unverified until Rivvi checks the vendor page. No BAA. Not on the HIPAA eligible products list. | help.openai.com |
| Claude | Free | Unverified | Unverified until Rivvi checks the vendor page. No BAA | support.claude.com |
| Claude | Pro | Unverified | Unverified until Rivvi checks the vendor page. No BAA | support.claude.com |
| Claude | Max | Unverified | Unverified until Rivvi checks the vendor page. No BAA | support.claude.com |
| Claude | Team | Unverified | Unverified until Rivvi checks the vendor page. No BAA. Cannot turn on HIPAA. | support.claude.com |
| Claude | Enterprise | Unverified | Unverified until Rivvi checks the vendor page. BAA available. BAA available. | support.claude.com |
| Claude | API | Unverified | Unverified until Rivvi checks the vendor page. BAA available. Separate BAA. | support.claude.com |
| CompliantChatGPT | Paid plans | Unverified | Unverified until Rivvi checks the vendor page. BAA only if the condition is met. The product page says you can request a BAA from Settings on any paid plan, and that signing it is required before the account is used with patient data. | compliantchatgpt.com |
| CompliantChatGPT | All plans | Unverified | Unverified until Rivvi checks the vendor page. BAA only if the condition is met. A separate CompliantChatGPT page says a BAA is provided to all users across all plans and signed from the account. That does not match the paid-plan page. | compliantchatgpt.com |
| DeepSeek | Not checked | Unverified | Unverified until Rivvi checks the vendor page. | Not checked |
| Dropbox | Not checked | Unverified | Unverified until Rivvi checks the vendor page. | Not checked |
| Fireflies | Not checked | Unverified | Unverified until Rivvi checks the vendor page. | Not checked |
| Gemini | Not checked | Unverified | Unverified until Rivvi checks the vendor page. | Not checked |
| Gmail | Not checked | Unverified | Unverified until Rivvi checks the vendor page. | Not checked |
| Google Drive | Not checked | Unverified | Unverified until Rivvi checks the vendor page. | Not checked |
| Google Workspace | Not checked | Unverified | Unverified until Rivvi checks the vendor page. | Not checked |
| Grammarly | Grammarly for Business Enterprise | Unverified | Unverified until Rivvi checks the vendor page. BAA available. Grammarly says it enters into BAAs only for Grammarly for Business Enterprise plans, through sales. | support.grammarly.com |
| Grammarly | Other plans | Unverified | Unverified until Rivvi checks the vendor page. No BAA. Grammarly says BAAs are only for Grammarly for Business Enterprise plans. | support.grammarly.com |
| Grok | Not checked | Unverified | Unverified until Rivvi checks the vendor page. | Not checked |
| Microsoft 365 | Not checked | Unverified | Unverified until Rivvi checks the vendor page. | Not checked |
| Microsoft Copilot | Copilot and Copilot Chat | Unverified | Unverified until Rivvi checks the vendor page. BAA only if the condition is met. Microsoft's page says these are covered by the BAA when the implementation is properly configured. Web search queries are not covered by the BAA. | learn.microsoft.com |
| Microsoft Teams | Not checked | Unverified | Unverified until Rivvi checks the vendor page. | Not checked |
| Notion | Enterprise | Unverified | Unverified until Rivvi checks the vendor page. BAA only if the condition is met. Notion's help page says you must be on the Enterprise plan and accept the BAA in workspace settings. Beta services are not covered. | notion.com |
| Notion | Other plans | Unverified | Unverified until Rivvi checks the vendor page. No BAA. The same page says a BAA requires the Enterprise plan. | notion.com |
| Otter | Not checked | Unverified | Unverified until Rivvi checks the vendor page. | Not checked |
| Perplexity | Not checked | Unverified | Unverified until Rivvi checks the vendor page. | Not checked |
| Rivvi | Free and paid plans | BAA available | E-signed in the app before any patient data moves. | Rivvi security |
| Slack | Not checked | Unverified | Unverified until Rivvi checks the vendor page. | Not checked |
| Zoom | Not checked | Unverified | Unverified until Rivvi checks the vendor page. | Not checked |
| Zoom AI Companion | Not checked | Unverified | Unverified until Rivvi checks the vendor page. | Not checked |
Vendors change plans and terms often. Rows marked Unverified are not confirmed. A BAA is necessary but not sufficient: your organization still needs policies, access controls, and minimum-necessary use. Which AI tools will sign a BAA
How it's calculated
Each row is a vendor plan we checked against the source linked in the table, last verified October 1, 2026. Vendors change plans and terms often. A BAA is necessary but not sufficient: your organization still needs policies, access controls, and minimum-necessary use.
Questions
Is ChatGPT HIPAA compliant?
Only certain offerings. OpenAI's July 2026 guide excludes Free, Plus, Pro, and Business. A BAA is available for ChatGPT for Healthcare, ChatGPT for Clinicians, sales-managed Enterprise and Edu, and the API with Modified Retention.
If our vendor signs a BAA, are we compliant?
Not automatically. The BAA makes the vendor accountable for safeguarding PHI. You still need policies, training, access controls, and minimum-necessary use. Shadow use of personal accounts stays outside the BAA.
What should staff use today if we have nothing approved?
Pick one tool with a BAA that covers the plan they'll use, publish a short acceptable use policy, and block or discourage personal accounts for work involving patients.