Overjet vs Pearl: which signs a HIPAA BAA?
Only Overjet offers a BAA. Overjet signs a BAA on all the plans we list. We couldn't confirm a BAA for Pearl from Pearl's own pages.
- Business associate
- Overjet
- Tool
- Overjet
- Plans with a BAA
- Overjet customers under a Master Services Agreement
- Checked
Signs a BAA
- Business associate
- Pearl
- Tool
- Pearl
- Plans with a BAA
- Not stated
- Checked
Not confirmed
Side by side
| OverjetOverjet | PearlPearl | |
|---|---|---|
| BAA | Signs a BAA | Not confirmed |
| Plans with a BAA | Overjet customers under a Master Services Agreement | Not stated |
| How to get it | Through sales | — |
| AI features outside the BAA partly covered excluded |
| None listed |
| Sources | 3 sources | 3 sources |
| Last checked | Oct 13, 2026 | Oct 13, 2026 |
Plan by plan
Overjet
- Overjet customers under a Master Services AgreementThe published BAA between Overjet, Inc. and the customer is effective as of the MSA's effective date and applies to the 'Covered Services' named in the MSA or order form. It requires written agreements with any subcontractor handling PHI. The customer must not give PHI to Overjet personnel outside the Covered Services. Overjet holds HITRUST certification.Signs a BAA
Pearl
- Pearl customers (practice and DSO agreements)The website terms say Pearl maintains SOC 2 Type II and HIPAA compliance and reference a Data Processing Addendum with customers where applicable, but products are governed by separate agreements not published. The privacy policy acknowledges patient data may be PHI but does not mention a BAA. A help article says Pearl holds BAAs with its AI infrastructure partners, which concerns Pearl's own vendors, not customers.Not confirmed
If you handle patient data
Use Overjet on a plan listed above, and sign the BAA before anyone enters protected health information. Don't put PHI into Pearl unless Pearl gives you a BAA in writing. Other Pearl alternatives that sign a BAA
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.