Blueprint vs Upheal: which signs a HIPAA BAA?
Both can be covered by a BAA, on different terms. Blueprint (HelloJoy, Inc.) signs a BAA for Blueprint on every plan we list. Upheal, Inc. signs a BAA for Upheal on every plan we list.
- Business associate
- Blueprint (HelloJoy, Inc.)
- Tool
- Blueprint
- Plans with a BAA
- Self-serve plans (Alongside your EHR, All-in-one EHR, Plus, Pro); Enterprise (custom pricing, annual contract)
- Checked
Signs a BAA
- Business associate
- Upheal, Inc.
- Tool
- Upheal
- Plans with a BAA
- Free / AI Notes / EHR / EHR Pro (solo, self-serve); Group practice (per-seat, via sales)
- Checked
Signs a BAA
Side by side
| BlueprintBlueprint (HelloJoy, Inc.) | UphealUpheal, Inc. | |
|---|---|---|
| BAA | Signs a BAA | Signs a BAA |
| Plans with a BAA | Self-serve plans (Alongside your EHR, All-in-one EHR, Plus, Pro); Enterprise (custom pricing, annual contract) | Free / AI Notes / EHR / EHR Pro (solo, self-serve); Group practice (per-seat, via sales) |
| How to get it | Included in the terms | Included in the terms |
| AI features outside the BAA | None listed | None listed |
| Sources | 3 sources | 4 sources |
| Last checked | Oct 11, 2026 | Oct 11, 2026 |
Every plan
Blueprint
- Self-serve plans (Alongside your EHR, All-in-one EHR, Plus, Pro)The BAA (last updated July 22, 2026) takes effect when the user first accepts the Terms of Service or starts using the service. The BAA page also links a HelloSign version for anyone who wants a signed copy. The BAA text does not limit coverage by plan, and the pricing page does not discuss BAAs per plan.Signs a BAA
- Enterprise (custom pricing, annual contract)The pricing page lists Enterprise with custom pricing and annual contracts. The same BAA applies to any account, and its Term section refers to an Order Form. No separate enterprise BAA process is described.Signs a BAA
Upheal
- Free / AI Notes / EHR / EHR Pro (solo, self-serve)The compliance page says every covered entity on the platform accepts the BAA at signup. The BAA page says it takes effect when the user clicks an accept button. The BAA does not limit coverage by plan. A copy is linked from the help center and sent in the welcome email.Signs a BAA
- Group practice (per-seat, via sales)The help center says that, for practice administrators, the BAA covers every provider in the organization. Group pricing is quoted through a 'Talk to us' sales contact. The same signup acceptance applies, and no separate group BAA process is described.Signs a BAA
If you handle patient data
Either can work. Choose on features and price, then make sure you’re on a plan listed above and the BAA is signed before anyone enters protected health information.
More comparisons
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.