Supabase alternatives that sign a HIPAA BAA
Supabase: only on some plans or setups. See the plan-by-plan breakdown.
Before you switch from Supabase
You may not have to. Supabase signs a BAA for Supabase on Team / Enterprise with HIPAA add-on. If you’re on another plan, upgrading may be simpler than moving your team. Even then, these stay outside the BAA: Third-party AI APIs called from Edge Functions or Postgres (e.g., OpenAI, Hugging Face).
| Tool | BAA | Plans with a BAA |
|---|---|---|
| Amazon BedrockAmazon Web Services | Signs a BAA | AWS accounts (standard AWS BAA) |
| AWS HealthScribeAmazon Web Services | Signs a BAA | AWS accounts with the AWS BAA accepted (US East, N. Virginia) |
| Google Cloud Vertex AI (Gemini Enterprise Agent Platform)Google Cloud | Signs a BAA | Google Cloud customers (Agent Platform / Vertex AI, GA services) |
Listed tools offer a BAA on at least one plan according to their own published terms. A BAA alone doesn’t make your use HIPAA compliant: you still need the right plan, configuration and policies. Not legal advice.