Retell AI vs Vapi: which signs a HIPAA BAA?
Both can be covered by a BAA, on different terms. Retell AI signs a BAA on every plan we list. Vapi signs one only on Usage-only or any Success Package, with the HIPAA add-on.
- Business associate
- Retell AI
- Tool
- Retell AI
- Plans with a BAA
- Pay-as-you-go; Enterprise
- Checked
Signs a BAA
- Business associate
- Vapi
- Tool
- Vapi
- Plans with a BAA
- Usage-only or any Success Package, with the HIPAA add-on
- Checked
Some plans only
Side by side
| Retell AIRetell AI | VapiVapi | |
|---|---|---|
| BAA | Signs a BAA | Some plans only |
| Plans with a BAA | Pay-as-you-go; Enterprise | Usage-only or any Success Package, with the HIPAA add-on |
| How to get it | Accept or sign online; Through sales | Accept or sign online |
| AI features outside the BAA partly covered excluded | None listed |
|
| Sources | 4 sources | 4 sources |
| Last checked | Oct 11, 2026 | Oct 11, 2026 |
Every plan
Retell AI
- Pay-as-you-goRetell's compliance docs say the BAA can be self-signed at click-agreements.retellai.com with no additional fee, and that a signed BAA is required before sending PHI. Retell's August 2026 blog post says HIPAA is available on pay-as-you-go and the BAA is requested from workspace settings and countersigned, usually within a business day. An older help-center article (marked last updated about a year ago) instead describes a BAA request form with manual team review, and says the BAA applies to the whole account rather than individual workspaces.Signs a BAA
- EnterpriseRetell's blog says Enterprise adds stronger SLAs and negotiated terms (e.g., redlined contracts) on top of the same compliance posture. The pricing page lists a separate 'Custom BAA' row, but its plan checkmarks did not render in the fetched text, so which tier gets a custom BAA is not confirmed from that page.Signs a BAA
Vapi
- Usage-only or any Success Package, with the HIPAA add-onVapi docs say HIPAA is a paid add-on available with Usage only or any Success Package. Buy it under Packages & add-ons in the dashboard, enter the BAA recipient, then sign the BAA Vapi emails. The pricing page lists the HIPAA add-on at $2,000/month, including a DPA and BAA. HIPAA mode applies org-wide, cannot be enabled via API, and cannot be combined with Zero Data Retention.Signs a BAA
If you handle patient data
Either can work. Choose on features and price, then make sure you’re on a plan listed above and the BAA is signed before anyone enters protected health information. Keep PHI out of the AI features listed as outside the BAA.
More comparisons
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.