ChatGPT vs Perplexity: which signs a HIPAA BAA?
Both can be covered by a BAA, on different terms. OpenAI signs one for ChatGPT only on Enterprise; Edu; ChatGPT for Healthcare; ChatGPT for Clinicians; ChatGPT FedRAMP. Perplexity AI signs one for Perplexity only on Enterprise Pro / Enterprise Max; API (Sonar).
- Business associate
- OpenAI
- Tool
- ChatGPT
- Plans with a BAA
- Enterprise; Edu; ChatGPT for Healthcare; ChatGPT for Clinicians; ChatGPT FedRAMP
- Checked
Some plans only
- Business associate
- Perplexity AI
- Tool
- Perplexity
- Plans with a BAA
- Enterprise Pro / Enterprise Max; API (Sonar)
- Checked
Some plans only
Side by side
| ChatGPTOpenAI | PerplexityPerplexity AI | |
|---|---|---|
| BAA | Some plans only | Some plans only |
| Plans with a BAA | Enterprise; Edu; ChatGPT for Healthcare; ChatGPT for Clinicians; ChatGPT FedRAMP | Enterprise Pro / Enterprise Max; API (Sonar) |
| How to get it | Through sales; Accept or sign online | Not stated |
| AI features outside the BAA partly covered excluded |
|
|
| Sources | 5 sources | 6 sources |
| Last checked | Oct 11, 2026 | Oct 11, 2026 |
Every plan
ChatGPT
- Free / Plus / ProOpenAI's HIPAA guide says the consumer ChatGPT services are not Eligible Services and may not be used with PHI.No BAA
- Business (formerly Team)OpenAI states that it does not offer a BAA for ChatGPT Business.No BAA
- EnterpriseOnly sales-managed Enterprise accounts are eligible. The HIPAA-eligible product list names 'ChatGPT for Enterprise with Regulated Workspace', and Enterprise is eligible only if the BAA lists it as an Eligible Service.Conditions apply
- EduSales-managed Edu accounts may get a BAA, and Edu is eligible only if the BAA lists it. The HIPAA-eligible products page does not list Edu as a product, though it lists Study Mode as covered functionality for Edu.Conditions apply
- ChatGPT for HealthcareListed as a HIPAA-eligible product with a BAA. It is a workspace for healthcare organizations, obtained by contacting OpenAI's team. This is also the route for multi-user clinician BAAs with central controls.Signs a BAA
- ChatGPT for CliniciansFree at launch for verified US clinicians (MD/DO, NP, PA, pharmacists) with a valid NPI and a verifiable license. Each clinician reviews and signs the BAA in the product under Settings > Agreements. Individual accounts only.Signs a BAA
- ChatGPT FedRAMPListed as a HIPAA-eligible product available with a BAA. How to obtain it is not described.Signs a BAA
Perplexity
- Free / Pro / Max (consumer)The consumer Terms do not mention HIPAA, PHI, or a BAA. Perplexity says HIPAA does not apply to consumer health products such as Perplexity Health.Not confirmed
- Enterprise Pro / Enterprise MaxEnterprise Terms section 5.2 bans PHI unless the parties have executed a BAA. Perplexity does not say how to request one or which features it would cover. Comet for Enterprise is under separate terms that were not reviewed.Conditions apply
- API (Sonar)API Terms section 6.2 has the same PHI ban unless a BAA is executed. API docs describe zero data retention for the Chat Completions API and list a 2025 HIPAA Gap Assessment.Conditions apply
If you handle patient data
Either can work. Choose on features and price, then make sure you’re on a plan listed above and the BAA is signed before anyone enters protected health information. Keep PHI out of the AI features listed as outside the BAA.
More comparisons
- ChatGPT vs Claude
- ChatGPT vs Gemini app
- ChatGPT vs Microsoft Copilot
- ChatGPT vs Grok
- ChatGPT vs CompliantChatGPT
- ChatGPT vs BastionGPT
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.