Rev vs Otter.ai: which signs a HIPAA BAA?
Both can be covered by a BAA, on different terms. Rev.com, Inc. signs one for Rev only on HIPAA subscription (enterprise; Unlimited tier on pricing page); Rev AI speech-to-text API. Otter.ai signs one only on Enterprise (with HIPAA add-on).
- Business associate
- Rev.com, Inc.
- Tool
- Rev
- Plans with a BAA
- HIPAA subscription (enterprise; Unlimited tier on pricing page); Rev AI speech-to-text API
- Checked
- Business associate
- Otter.ai
- Tool
- Otter.ai
- Plans with a BAA
- Enterprise (with HIPAA add-on)
- Checked
Side by side
| RevRev.com, Inc. | Otter.aiOtter.ai | |
|---|---|---|
| BAA | Some plans only | Some plans only |
| Plans with a BAA | HIPAA subscription (enterprise; Unlimited tier on pricing page); Rev AI speech-to-text API | Enterprise (with HIPAA add-on) |
| How to get it | Through sales | Through sales |
| AI features outside the BAA partly covered excluded |
| None listed |
| Sources | 5 sources | 4 sources |
| Last checked | Oct 11, 2026 | Oct 11, 2026 |
Every plan
Rev
- HIPAA subscription (enterprise; Unlimited tier on pricing page)BAA plus MSA/MNDA must be signed before account setup. Annual billing only. AI-only processing (no human services); paste-URL upload removed, transcripts/summaries removed from notification emails, public sharing blocked.Signs a BAA
- Free / Essentials / Pro (standard plans)Rev's help center says only the HIPAA subscription plan is covered and it is not available through general access.No BAA
- Rev AI speech-to-text APIContact Rev sales/customer success for the BAA and updated MSA, then open a separate HIPAA-enabled Rev AI account. media_url input, human transcription and RTMP streaming are not supported for HIPAA accounts.Signs a BAA
Otter.ai
- Enterprise (with HIPAA add-on)BAA must be signed before any PHI is handled; start through your account executive/account manager or Otter sales. Pricing page lists HIPAA compliance as an Enterprise add-on. Otter recommends admins restrict Notetaker auto-join, disable external sharing, enforce SSO/2FA and set retention.Signs a BAA
- Plans below EnterpriseOtter's HIPAA help article says HIPAA compliance is available only on the Enterprise plan.No BAA
If you handle patient data
Either can work. Choose on features and price, then make sure you’re on a plan listed above and the BAA is signed before anyone enters protected health information. Keep PHI out of the AI features listed as outside the BAA.
More comparisons
- Otter.ai vs Fireflies.ai
- Otter.ai vs Granola
- Otter.ai vs Fathom
- Otter.ai vs Read AI
- Zoom AI Companion vs Otter.ai
- Plaud vs Otter.ai
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.