Glean vs Amazon Q Business: which signs a HIPAA BAA?
Both can be covered by a BAA, on different terms. Glean signs a BAA on every plan we list. Amazon Web Services signs a BAA for Amazon Q Business on every plan we list.
- Business associate
- Glean
- Tool
- Glean
- Plans with a BAA
- Glean (enterprise customers)
- Checked
Signs a BAA
- Business associate
- Amazon Web Services
- Tool
- Amazon Q Business
- Plans with a BAA
- Q Business Lite / Pro (existing customers)
- Checked
Signs a BAA
Side by side
| GleanGlean | Amazon Q BusinessAmazon Web Services | |
|---|---|---|
| BAA | Signs a BAA | Signs a BAA |
| Plans with a BAA | Glean (enterprise customers) | Q Business Lite / Pro (existing customers) |
| How to get it | Accept or sign online | Accept or sign online |
| AI features outside the BAA | None listed | None listed |
| Sources | 4 sources | 5 sources |
| Last checked | Oct 11, 2026 | Oct 11, 2026 |
Every plan
Glean
- Glean (enterprise customers)The legal page lists a BAA with Glean as Business Associate and another with Glean as Subcontractor, each with a 'Sign BAA' DocuSign link. Plan restrictions could not be checked because the BAA text was unreachable.Signs a BAA
Amazon Q Business
- Q Business Lite / Pro (existing customers)Covered under the standard AWS BAA, accepted in AWS Artifact, in all Regions where Q Business is offered. Closed to new customers, with existing customers receiving only bug fixes and security updates.Signs a BAA
If you handle patient data
Either can work. Choose on features and price, then make sure you’re on a plan listed above and the BAA is signed before anyone enters protected health information.
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.