Upheal vs Mentalyc: which signs a HIPAA BAA?
Both can be covered by a BAA, on different terms. Upheal, Inc. signs a BAA for Upheal on every plan we list. Mentalyc, Inc. signs a BAA for Mentalyc on every plan we list.
- Business associate
- Upheal, Inc.
- Tool
- Upheal
- Plans with a BAA
- Free / AI Notes / EHR / EHR Pro (solo, self-serve); Group practice (per-seat, via sales)
- Checked
Signs a BAA
- Business associate
- Mentalyc, Inc.
- Tool
- Mentalyc
- Plans with a BAA
- Solo plans (Mini, Basic, Pro, Super); Team (group practice, per seat)
- Checked
Signs a BAA
Side by side
| UphealUpheal, Inc. | MentalycMentalyc, Inc. | |
|---|---|---|
| BAA | Signs a BAA | Signs a BAA |
| Plans with a BAA | Free / AI Notes / EHR / EHR Pro (solo, self-serve); Group practice (per-seat, via sales) | Solo plans (Mini, Basic, Pro, Super); Team (group practice, per seat) |
| How to get it | Included in the terms | Included in the terms |
| AI features outside the BAA | None listed | None listed |
| Sources | 4 sources | 3 sources |
| Last checked | Oct 11, 2026 | Oct 11, 2026 |
Every plan
Upheal
- Free / AI Notes / EHR / EHR Pro (solo, self-serve)The compliance page says every covered entity on the platform accepts the BAA at signup. The BAA page says it takes effect when the user clicks an accept button. The BAA does not limit coverage by plan. A copy is linked from the help center and sent in the welcome email.Signs a BAA
- Group practice (per-seat, via sales)The help center says that, for practice administrators, the BAA covers every provider in the organization. Group pricing is quoted through a 'Talk to us' sales contact. The same signup acceptance applies, and no separate group BAA process is described.Signs a BAA
Mentalyc
- Solo plans (Mini, Basic, Pro, Super)The user accepts the BAA by ticking an acceptance box during account registration. The pricing table shows the BAA on all four solo plans. The BAA caps Mentalyc's aggregate liability at $10,000.Signs a BAA
- Team (group practice, per seat)The pricing table shows the BAA on the Team plan. The group-practice page says every account and every clinician is covered by the BAA, and that no sales call is needed to get started.Signs a BAA
If you handle patient data
Either can work. Choose on features and price, then make sure you’re on a plan listed above and the BAA is signed before anyone enters protected health information.
More comparisons
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.