BastionGPT vs CompliantChatGPT: which signs a HIPAA BAA?
Both can be covered by a BAA, on different terms. Bastion Intelligence signs a BAA for BastionGPT on every plan we list. Light-it signs a BAA for CompliantChatGPT on every plan we list.
- Business associate
- Bastion Intelligence
- Tool
- BastionGPT
- Plans with a BAA
- Professional; Professional Plus; Ultra (Enterprise); API
- Checked
Signs a BAA
- Business associate
- Light-it
- Tool
- CompliantChatGPT
- Plans with a BAA
- Starter / Pro / Full; Enterprise
- Checked
Signs a BAA
Side by side
| BastionGPTBastion Intelligence | CompliantChatGPTLight-it | |
|---|---|---|
| BAA | Signs a BAA | Signs a BAA |
| Plans with a BAA | Professional; Professional Plus; Ultra (Enterprise); API | Starter / Pro / Full; Enterprise |
| How to get it | Included in the terms | Request by email; Through sales |
| Minimum seats | 100 seats on Ultra (Enterprise) | None stated |
| AI features outside the BAA partly covered excluded | None listed |
|
| Sources | 2 sources | 4 sources |
| Last checked | Oct 12, 2026 | Oct 12, 2026 |
Every plan
BastionGPT
- Professional$20 per user per month. The BAA is accepted electronically with the terms of use at account creation. For a countersigned DocuSign copy, email the team or ask in chat. Bastion says most copies go out within 30 minutes and all within one business day. Redline BAAs are not available on this plan.Signs a BAA
- Professional Plus$45 per user per month. The standard BAA is included. A customizable (redline) BAA and SSO are add-ons that need 50 or more users.Signs a BAA
- Ultra (Enterprise)$75 per user per month for 100 or more users. A redline BAA is included. The FAQ calls the top tier 'Enterprise' while the pricing table calls it 'Ultra'.Signs a BAA
- APIThe help article says API access is covered by the BAA once the terms of use are accepted.Signs a BAA
CompliantChatGPT
- Starter / Pro / FullPer-user plans; the pricing page lists 'Standard Business Associate Agreement included' on each. The HIPAA page says to request the BAA through its 'Request the BAA' link before rollout. The support page lists support@compliantchatgpt.com but does not name it as the BAA contact. The terms describe the BAA as executed separately between Light-it and the customer. Whether the free trial includes the BAA is unclear: the terms say it may apply to trials 'where applicable', while the HIPAA page names only paid plans.Signs a BAA
- EnterpriseCustom pricing. Includes the standard BAA, and Enterprise customers may redline it.Signs a BAA
If you handle patient data
Either can work. Choose on features and price, then make sure you’re on a plan listed above and the BAA is signed before anyone enters protected health information. Keep PHI out of the AI features listed as outside the BAA.
More comparisons
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.