OpenRouter alternatives that sign a HIPAA BAA
OpenRouter: not confirmed. See the plan-by-plan breakdown.
Before you switch from OpenRouter
We couldn’t confirm from OpenRouter’s own pages that it signs a BAA for OpenRouter. Ask OpenRouter for one in writing, or use a tool below that publishes its BAA terms.
| Tool | BAA | Plans with a BAA |
|---|---|---|
| Claude API (Claude Platform)Anthropic | Some plans only | First-party API (custom / negotiated BAA); First-party API (self-serve Console enablement) |
| CohereCohere | Some plans only | Custom model development engagement |
| GroqCloudGroq | Some plans only | GroqCloud paid, generally available services (customers with an existing Groq agreement) |
| Hugging FaceHugging Face | Some plans only | Enterprise |
| ModalModal | Some plans only | Enterprise |
| BasetenBaseten | Signs a BAA | All plans (Basic, Pro, Enterprise) |
| OpenAI API platformOpenAI | Signs a BAA | API (enterprise / sales-managed accounts); API (pay-as-you-go / self-serve organizations); API FedRAMP (with Modified Retention) |
Listed tools offer a BAA on at least one plan according to their own published terms. A BAA alone doesn’t make your use HIPAA compliant: you still need the right plan, configuration and policies. Not legal advice.