Suki Assistant vs Microsoft Dragon Copilot: which signs a HIPAA BAA?
Both can be covered by a BAA, on different terms. Suki signs a BAA for Suki Assistant on every plan we list. Microsoft signs a BAA for Microsoft Dragon Copilot on every plan we list.
- Business associate
- Suki
- Tool
- Suki Assistant
- Plans with a BAA
- Suki Assistant / Suki Compose (per-user, organization sales)
- Checked
Signs a BAA
- Business associate
- Microsoft
- Tool
- Microsoft Dragon Copilot
- Plans with a BAA
- Dragon Copilot (enterprise, via Microsoft volume licensing: EA/EAS, EES, MOSA); Dragon Copilot Physician Practice / Flex editions
- Checked
Signs a BAA
Microsoft Dragon Copilot: plan-by-plan breakdown and sources
Side by side
| Suki AssistantSuki | Microsoft Dragon CopilotMicrosoft | |
|---|---|---|
| BAA | Signs a BAA | Signs a BAA |
| Plans with a BAA | Suki Assistant / Suki Compose (per-user, organization sales) | Dragon Copilot (enterprise, via Microsoft volume licensing: EA/EAS, EES, MOSA); Dragon Copilot Physician Practice / Flex editions |
| How to get it | Through sales | Included in the terms |
| AI features outside the BAA | None listed | None listed |
| Sources | 3 sources | 5 sources |
| Last checked | Oct 11, 2026 | Oct 11, 2026 |
Every plan
Suki Assistant
- Suki Assistant / Suki Compose (per-user, organization sales)The pricing page lists per-user monthly pricing with enterprise volume discounts and no self-serve sign-up. The BAA statement comes from Suki's developer-platform security FAQ, which says only 'customers' without separating API partners from end-user organizations.Signs a BAA
Microsoft Dragon Copilot
- Dragon Copilot (enterprise, via Microsoft volume licensing: EA/EAS, EES, MOSA)The Dragon Copilot section of the Privacy & Security Terms defines PHI by reference to the HIPAA BAA (aka.ms/BAA). Microsoft says its HIPAA BAA reaches covered entities and business associates by default through the Data Protection Addendum. 'auto_included' is therefore based on those two documents; no Dragon Copilot page says it in so many words. Microsoft's HIPAA in-scope services list (last updated 2025-07-29) does not name Dragon Copilot.Signs a BAA
- Dragon Copilot Physician Practice / Flex editionsProduct Terms list Physician Practice (EA/EAS, EES, MOSA) and Flex (MOSA) user licenses. The Dragon Copilot privacy terms that reference the BAA apply to Dragon Copilot as a whole and do not single out any edition. Practices buy through Microsoft licensing programs or partners.Signs a BAA
If you handle patient data
Either can work. Choose on features and price, then make sure you’re on a plan listed above and the BAA is signed before anyone enters protected health information.
More comparisons
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.