Claude Code alternatives that sign a HIPAA BAA
Claude Code: only on some plans or setups. See the plan-by-plan breakdown.
Before you switch from Claude Code
You may not have to. Anthropic signs a BAA for Claude Code on Claude Enterprise (HIPAA-ready); Claude Console API key (Commercial org) with zero data retention. If you’re on another plan, upgrading may be simpler than moving your team. Even then, these stay outside the BAA: Claude Code with a Console API key; Claude Code on the web, cloud sessions, Remote Control and mobile; VS Code / JetBrains extensions, LLM gateways, custom base URLs, and Claude Code via Bedrock, Google Cloud or Microsoft Foundry.
| Tool | BAA | Plans with a BAA |
|---|---|---|
| CursorAnysphere (Cursor) | Some plans only | Enterprise |
| OpenAI CodexOpenAI | Some plans only | ChatGPT for Healthcare / ChatGPT for Clinicians / Enterprise or Edu with Regulated Workspace; OpenAI API (API key sign-in) with Modified Retention |
Listed tools offer a BAA on at least one plan according to their own published terms. A BAA alone doesn’t make your use HIPAA compliant: you still need the right plan, configuration and policies. Not legal advice.