Luma Health vs Artera: which signs a HIPAA BAA?
Both can be covered by a BAA, on different terms. Luma Health signs a BAA on all the plans we list. Artera signs a BAA on all the plans we list.
- Business associate
- Luma Health
- Tool
- Luma Health
- Plans with a BAA
- Luma Health customer contract
- Checked
Signs a BAA
- Business associate
- Artera
- Tool
- Artera
- Plans with a BAA
- Artera enterprise contract (health systems and practices)
- Checked
Signs a BAA
Side by side
| Luma HealthLuma Health | ArteraArtera | |
|---|---|---|
| BAA | Signs a BAA | Signs a BAA |
| Plans with a BAA | Luma Health customer contract | Artera enterprise contract (health systems and practices) |
| How to get it | Through sales | Through sales |
| AI features outside the BAA | None listed | None listed |
| Sources | 3 sources | 4 sources |
| Last checked | Oct 13, 2026 | Oct 13, 2026 |
Plan by plan
Luma Health
- Luma Health customer contractThe published BAA is a template with blank party and date fields, so it is signed per customer. It covers all existing or future contracts between the parties. No plan or tier restrictions are stated.Signs a BAA
Artera
- Artera enterprise contract (health systems and practices)Artera's Terms of Service (between WELL Health d/b/a Artera and the customer on the order form) incorporate a BAA governing HIPAA data in the services, and list it in the entire-agreement clause where applicable. The privacy policy says PHI is governed by the BAA or services agreement with the provider. No public BAA template or request process was found, and no plan restrictions are stated.Signs a BAA
If you handle patient data
Either can work. Choose on features and price, then make sure you’re on a plan listed above and the BAA is signed before anyone enters protected health information.
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.