Rev vs Otter.ai: which signs a HIPAA BAA?

Both can be covered by a BAA, on different terms. Rev.com, Inc. signs one for Rev only on HIPAA subscription (enterprise; Unlimited tier on pricing page); Rev AI speech-to-text API. Otter.ai signs one only on Enterprise (with HIPAA add-on).

Business associate
Rev.com, Inc.
Tool
Rev
Plans with a BAA
HIPAA subscription (enterprise; Unlimited tier on pricing page); Rev AI speech-to-text API
Checked
Some plans only
Rev.com, Inc. signs only for the plans listed.
Business associate
Otter.ai
Tool
Otter.ai
Plans with a BAA
Enterprise (with HIPAA add-on)
Checked
Some plans only
Otter.ai signs only for the plans listed.

Side by side

RevRev.com, Inc.Otter.aiOtter.ai
BAASome plans onlySome plans only
Plans with a BAAHIPAA subscription (enterprise; Unlimited tier on pricing page); Rev AI speech-to-text APIEnterprise (with HIPAA add-on)
How to get itThrough salesThrough sales
AI features outside the BAA partly covered excluded
  • Human transcription (Excluded from the BAA)
None listed
Sources5 sources4 sources
Last checkedOct 11, 2026Oct 11, 2026

Every plan

Rev

  • HIPAA subscription (enterprise; Unlimited tier on pricing page)BAA plus MSA/MNDA must be signed before account setup. Annual billing only. AI-only processing (no human services); paste-URL upload removed, transcripts/summaries removed from notification emails, public sharing blocked.Signs a BAA
  • Free / Essentials / Pro (standard plans)Rev's help center says only the HIPAA subscription plan is covered and it is not available through general access.No BAA
  • Rev AI speech-to-text APIContact Rev sales/customer success for the BAA and updated MSA, then open a separate HIPAA-enabled Rev AI account. media_url input, human transcription and RTMP streaming are not supported for HIPAA accounts.Signs a BAA

Otter.ai

  • Enterprise (with HIPAA add-on)BAA must be signed before any PHI is handled; start through your account executive/account manager or Otter sales. Pricing page lists HIPAA compliance as an Enterprise add-on. Otter recommends admins restrict Notetaker auto-join, disable external sharing, enforce SSO/2FA and set retention.Signs a BAA
  • Plans below EnterpriseOtter's HIPAA help article says HIPAA compliance is available only on the Enterprise plan.No BAA

If you handle patient data

Either can work. Choose on features and price, then make sure you’re on a plan listed above and the BAA is signed before anyone enters protected health information. Keep PHI out of the AI features listed as outside the BAA.

More comparisons

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.