Deepgram vs AssemblyAI: which signs a HIPAA BAA?
Both can be covered by a BAA, on different terms. Deepgram signs one only on Enterprise. AssemblyAI signs one only on Paid (upgraded) accounts.
- Business associate
- Deepgram
- Tool
- Deepgram
- Plans with a BAA
- Enterprise
- Checked
Some plans only
- Business associate
- AssemblyAI
- Tool
- AssemblyAI
- Plans with a BAA
- Paid (upgraded) accounts
- Checked
Some plans only
Side by side
| DeepgramDeepgram | AssemblyAIAssemblyAI | |
|---|---|---|
| BAA | Some plans only | Some plans only |
| Plans with a BAA | Enterprise | Paid (upgraded) accounts |
| How to get it | Through sales | Accept or sign online |
| AI features outside the BAA | None listed | None listed |
| Sources | 4 sources | 5 sources |
| Last checked | Oct 11, 2026 | Oct 11, 2026 |
Every plan
Deepgram
- EnterpriseThe pricing page says Deepgram signs BAAs for Enterprise customers handling ePHI. The docs say to contact Deepgram or your account executive to set one up.Signs a BAA
- Pay As You Go / GrowthThe pricing page mentions BAAs only for Enterprise and does not say self-serve tiers are ineligible.Not confirmed
- Self-hosted / on-prem deploymentDeepgram's medical transcription page presents self-hosted, on-prem deployment as a HIPAA-compliant option but does not mention a BAA.Not confirmed
AssemblyAI
- Paid (upgraded) accountsOwners or admins of paid accounts can sign the standard online BAA from the Data Controls page in the dashboard, at no extra cost. Signing opts the account out of model training. AssemblyAI's legal page calls its BAA text a sample template and points to sales for a signed copy.Signs a BAA
- Free accountsThe BAA option only appears in the dashboard for upgraded (paid) accounts.No BAA
If you handle patient data
Either can work. Choose on features and price, then make sure you’re on a plan listed above and the BAA is signed before anyone enters protected health information.
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.