Fireflies.ai vs Fathom: which signs a HIPAA BAA?
Both can be covered by a BAA, on different terms. Fireflies.ai signs one only on Enterprise. Fathom Video Inc. signs a BAA for Fathom on every plan we list.
- Business associate
- Fireflies.ai
- Tool
- Fireflies.ai
- Plans with a BAA
- Enterprise
- Checked
Some plans only
- Business associate
- Fathom Video Inc.
- Tool
- Fathom
- Plans with a BAA
- All plans (blanket BAA via Terms)
- Checked
Signs a BAA
Side by side
| Fireflies.aiFireflies.ai | FathomFathom Video Inc. | |
|---|---|---|
| BAA | Some plans only | Signs a BAA |
| Plans with a BAA | Enterprise | All plans (blanket BAA via Terms) |
| How to get it | Accept or sign online | Included in the terms |
| AI features outside the BAA | None listed | None listed |
| Sources | 4 sources | 3 sources |
| Last checked | Oct 11, 2026 | Oct 11, 2026 |
Every plan
Fireflies.ai
- EnterpriseHIPAA requires all three: Enterprise plan, Private Storage enabled, and a signed BAA (signed via fireflies.ai/baa; questions to security@fireflies.ai). Downgrading or removing Private Storage disables HIPAA. Pricing page lists Enterprise at $39/seat/month, annual only; no minimum seats stated. Marketing HIPAA page says the HIPAA offering is available on request.Signs a BAA
- Plans below EnterpriseHelp article says HIPAA is available only on Enterprise; lower plans must upgrade first.No BAA
Fathom
- All plans (blanket BAA via Terms)Terms incorporate the BAA at fathom.ai/baa by reference when HIPAA applies to the customer. A separately signed BAA can be requested from help@fathom.video. No plan restriction is stated, but plan scope is also not explicitly confirmed.Signs a BAA
If you handle patient data
Either can work. Choose on features and price, then make sure you’re on a plan listed above and the BAA is signed before anyone enters protected health information.
More comparisons
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.