Zoom AI Companion vs Otter.ai: which signs a HIPAA BAA?
Both can be covered by a BAA, on different terms. Zoom Communications signs one for Zoom AI Companion only on Pro (Zoom for Healthcare); Business / Business Plus / Enterprise. Otter.ai signs one only on Enterprise (with HIPAA add-on).
- Business associate
- Zoom Communications
- Tool
- Zoom AI Companion
- Plans with a BAA
- Pro (Zoom for Healthcare); Business / Business Plus / Enterprise
- Checked
- Business associate
- Otter.ai
- Tool
- Otter.ai
- Plans with a BAA
- Enterprise (with HIPAA add-on)
- Checked
Side by side
| Zoom AI CompanionZoom Communications | Otter.aiOtter.ai | |
|---|---|---|
| BAA | Some plans only | Some plans only |
| Plans with a BAA | Pro (Zoom for Healthcare); Business / Business Plus / Enterprise | Enterprise (with HIPAA add-on) |
| How to get it | Accept or sign online; Through sales | Through sales |
| AI features outside the BAA partly covered excluded |
| None listed |
| Sources | 6 sources | 4 sources |
| Last checked | Oct 11, 2026 | Oct 11, 2026 |
Every plan
Zoom AI Companion
- Pro (Zoom for Healthcare)At checkout, choose 'United States Agreement (BAA)' and accept it. Existing accounts can turn on the BAA under Plans and Billing > Plan Management. No extra manual configuration is needed after the BAA is signed.Signs a BAA
- Business / Business Plus / EnterpriseNew Business, Business Plus, and Enterprise customers go through Sales. Existing accounts can turn on the BAA in the web portal. Zoom also signs BAAs for other paid plans on its pricing page.Signs a BAA
Otter.ai
- Enterprise (with HIPAA add-on)BAA must be signed before any PHI is handled; start through your account executive/account manager or Otter sales. Pricing page lists HIPAA compliance as an Enterprise add-on. Otter recommends admins restrict Notetaker auto-join, disable external sharing, enforce SSO/2FA and set retention.Signs a BAA
- Plans below EnterpriseOtter's HIPAA help article says HIPAA compliance is available only on the Enterprise plan.No BAA
If you handle patient data
Either can work. Choose on features and price, then make sure you’re on a plan listed above and the BAA is signed before anyone enters protected health information. Keep PHI out of the AI features listed as outside the BAA.
More comparisons
- Otter.ai vs Fireflies.ai
- Otter.ai vs Granola
- Otter.ai vs Fathom
- Otter.ai vs Read AI
- Plaud vs Otter.ai
- Rev vs Otter.ai
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.