Grammarly vs QuillBot: which signs a HIPAA BAA?
Only Grammarly offers a BAA. Grammarly (Superhuman) signs one for Grammarly only on Enterprise (Grammarly for Business Enterprise / Superhuman Enterprise). We couldn't confirm a BAA for QuillBot from QuillBot (Learneo, Inc.)'s own pages.
- Business associate
- Grammarly (Superhuman)
- Tool
- Grammarly
- Plans with a BAA
- Enterprise (Grammarly for Business Enterprise / Superhuman Enterprise)
- Checked
- Business associate
- QuillBot (Learneo, Inc.)
- Tool
- QuillBot
- Plans with a BAA
- Not stated
- Checked
Side by side
| GrammarlyGrammarly (Superhuman) | QuillBotQuillBot (Learneo, Inc.) | |
|---|---|---|
| BAA | Some plans only | Not confirmed |
| Plans with a BAA | Enterprise (Grammarly for Business Enterprise / Superhuman Enterprise) | Not stated |
| How to get it | Through sales | — |
| AI features outside the BAA partly covered excluded |
| None listed |
| Sources | 4 sources | 2 sources |
| Last checked | Oct 11, 2026 | Oct 11, 2026 |
Every plan
Grammarly
- Free / ProGrammarly says it can enter BAAs only for Enterprise plans. Its business agreement bans HIPAA data unless a BAA covers the relevant Services.No BAA
- Enterprise (Grammarly for Business Enterprise / Superhuman Enterprise)Contact Grammarly Sales. No minimum seat count is published. A signed BAA becomes part of the Customer Business Agreement by reference.Signs a BAA
QuillBot
- Free / Premium / TeamTrust center lists GDPR, CCPA, PCI DSS, CASA Tier 2 and the Data Privacy Frameworks, with no mention of HIPAA, BAA or PHI. The Team plan is described as excluded from model training, which is not a BAA.Not confirmed
If you handle patient data
Use Grammarly on a plan listed above, and sign the BAA before anyone enters protected health information. Don't put PHI into QuillBot unless QuillBot (Learneo, Inc.) gives you a BAA in writing. Other QuillBot alternatives that sign a BAA
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.