AI tools that sign a BAA but leave some AI features out
Signing a BAA for a product doesn't mean its AI is covered. For each of these tools, the vendor's own pages put at least one AI feature outside the BAA or only partly inside it.
51 of the 250 AI tools we track. Each comes from the vendor’s own pages; open a tool for its plans and sources.
| Tool | BAA | Outside the BAA | Kind |
|---|---|---|---|
| Adobe Acrobat AI AssistantAdobe | Some plans only | Acrobat AI Assistant (general document chat, summaries) (excluded); PDF Spaces (excluded) | Workspace and collaboration AI |
| Amazon BedrockAmazon Web Services | Signs a BAA | Claude on Bedrock under Anthropic's BAA (excluded) | Cloud AI platforms |
| Amazon TranslateAmazon Web Services | Some plans only | Service improvement use of content (partly covered) | Translation AI |
| Asana AIAsana | Some plans only | Some Asana AI tools (unspecified) (excluded); AI features on AsanaGov HIPAA domains (partly covered) | Workspace and collaboration AI |
| Atlassian Rovo / Atlassian Intelligence (Confluence, Jira)Atlassian | Some plans only | Rovo MCP server, Rovo CLI, Rovo browser extension, Rovo mobile and desktop apps (excluded); Trial or early-access AI features and third-party apps (excluded) | Workspace and collaboration AI |
| Azure OpenAIMicrosoft | Some plans only | Other partner/community models (e.g., Mistral, DeepSeek, Qwen) (excluded) | Cloud AI platforms |
| ChatGPTOpenAI | Some plans only | Custom GPTs, workspace agents, Team Automations (partly covered); Codex (local: desktop app, IDE, CLI) (partly covered); Codex in the cloud, Computer History, Codex Security administration (excluded); Cloud browser use, cloud network access, Sites, improved memory (excluded); Third-party GPTs and connected apps (Clinicians) (excluded) | AI chat assistants |
| Claude API (Claude Platform)Anthropic | Some plans only | Web search tool (partly covered); Batch processing, Files API, code execution, agent skills, web fetch, MCP connector, programmatic tool calling, Claude Managed Agents, context management (excluded); Claude Console (workbench / playground) (excluded); Claude Code using an API organization (partly covered); Covered Models (Claude Fable 5 / 5.1, Mythos 5 / 5.1) (partly covered) | LLM APIs |
| Claude apps (Claude.ai)Anthropic | Some plans only | File creation and code execution (partly covered); Claude Code (terminal via Enterprise sign-in, Desktop tab) and Cowork in Claude Desktop, local mode (partly covered); Claude Code on web/cloud/mobile, Remote Control, Cowork in the cloud, Code Review, Security, computer use (excluded); Claude Code VS Code / JetBrains extensions, gateway or custom base URL setups, and Claude Code via Bedrock / Agent Platform / Foundry (excluded); MCP servers and connectors, Enterprise Search, Claude in Chrome, Skills (excluded); Beta features (Claude in Office, Claude Design, Claude Slides, Claude Docs) (excluded) | AI chat assistants |
| Claude CodeAnthropic | Some plans only | Claude Code with a Console API key (partly covered); Claude Code on the web, cloud sessions, Remote Control and mobile (excluded); VS Code / JetBrains extensions, LLM gateways, custom base URLs, and Claude Code via Bedrock, Google Cloud or Microsoft Foundry (excluded) | AI coding tools |
| ClickUp BrainClickUp | Some plans only | ClickUp Brain and Super Agents (partly covered) | Workspace and collaboration AI |
| Cloudflare Workers AICloudflare | Some plans only | AI Gateway calls to third-party model providers (excluded) | Cloud AI platforms |
| Coda AI (Superhuman Docs AI)Superhuman (formerly Coda / Grammarly) | Some plans only | Docs AI Web Search, Vision (image/PDF uploads), Prompt Caching / extended cache TTL, Tool Streaming (excluded) | Workspace and collaboration AI |
| CohereCohere | Some plans only | Cohere hosted models (Command, Embed, Rerank) via API / SaaS (excluded) | LLM APIs |
| CompliantChatGPTLight-it | Signs a BAA | Zoom integration (partly covered) | AI chat assistants |
| CursorAnysphere (Cursor) | Some plans only | AI models / third-party model providers (partly covered); Third-party services and integrations (excluded) | AI coding tools |
| Databricks AIDatabricks | Some plans only | Model Serving: Foundation Model APIs (pay-per-token), custom models, external models, ai_query, AI Playground, AI Gateway (partly covered); Vector Search, AI Functions (AI Extract, AI Classify, AI ParseDocument) and Agent Bricks AI Functions (partly covered); Genie Code (formerly Databricks Assistant), Genie Agents, Genie One and other AI assistive features (partly covered); Preview features not listed in the HIPAA support table (excluded) | Cloud AI platforms |
| ElevenLabsElevenLabs | Some plans only | ElevenAgents without Zero Retention Mode (excluded); MCP tool support in agents (excluded) | Speech-to-text and voice APIs |
| Freshdesk / Freddy AIFreshworks | Some plans only | Freddy AI (Freddy AI Agent, Freddy AI Copilot, Freddy AI Insights) (excluded) | Customer support AI |
| Gemini Code AssistGoogle Cloud | Some plans only | Gemini Code Assist on GitHub (code review) (excluded) | AI coding tools |
| Gemini for Google WorkspaceGoogle | Signs a BAA | Gemini in Chrome (excluded); Gemini Notebook (formerly NotebookLM) (excluded) | Productivity suite AI |
| Genesys Cloud AIGenesys | Some plans only | Third-party bots and LLMs (Dialogflow, Amazon Lex, third-party summarization) (excluded); Voicemail transcription (excluded) | AI voice agents |
| Glass HealthGlass Health | Some plans only | Developer API (clinical AI, incl. Scribing API) (partly covered) | Clinical AI assistants |
| Google Cloud Contact Center AI / Customer Engagement SuiteGoogle Cloud | Signs a BAA | Agent Assist (partly covered) | AI voice agents |
| Google Cloud Speech-to-TextGoogle Cloud | Signs a BAA | Data logging program (opt-in) (excluded); Pre-GA (preview) features and models (excluded) | Speech-to-text and voice APIs |
| Google Cloud TranslationGoogle Cloud | Signs a BAA | Pre-GA (preview) features and models (excluded) | Translation AI |
| Google Cloud Vertex AI (Gemini Enterprise Agent Platform)Google Cloud | Signs a BAA | Conversational Agents (partly covered); Pre-GA (preview) models and features (excluded) | Cloud AI platforms |
| Google NotebookLM / Gemini NotebookGoogle | Some plans only | Gemini Notebook (Workspace edition): source-grounded chat, audio overviews, notes (excluded) | Workspace and collaboration AI |
| GrammarlyGrammarly (Superhuman) | Some plans only | Superhuman Go (AI assistant) (partly covered) | Writing assistants |
| GrokxAI (SpaceXAI LLC) | Some plans only | Files API, Collections (RAG), Batch API, deferred completions, stored Responses state (excluded); Image/video generation and voice agents under ZDR (partly covered) | AI chat assistants |
| GroqCloudGroq | Some plans only | Beta / non-GA features (excluded) | LLM APIs |
| IBM watsonx.aiIBM | Some plans only | Tuning, custom and deploy-on-demand models, AutoAI, AI services, Agent Lab, guardrails, text extraction, vector index (excluded); Cloud Pak for Data as a Service projects (excluded) | Cloud AI platforms |
| Microsoft 365 CopilotMicrosoft | Signs a BAA | Web search grounding (Bing web queries) (excluded); Third-party plugins / connectors (excluded) | Productivity suite AI |
| ModalModal | Some plans only | Volumes v1, Images, Memory Snapshots and user code (excluded) | LLM APIs |
| Notion AINotion Labs | Some plans only | Beta AI features (excluded) | Workspace and collaboration AI |
| OpenAI API platformOpenAI | Signs a BAA | Web search tool (Responses API), live internet access (excluded); Web search tool (Responses API), offline mode (partly covered); Remote MCP servers (excluded); Codex local, signed in with an API key (partly covered) | LLM APIs |
| OpenAI CodexOpenAI | Some plans only | Codex Cloud (cloud-hosted tasks) (excluded); Web search, connectors, MCP servers, plugins and third-party services within Codex (excluded) | AI coding tools |
| OverjetOverjet | Signs a BAA | Voice notes and LLM features (partly covered) | Clinical AI assistants |
| PerplexityPerplexity AI | Some plans only | Perplexity Health (consumer health features and medical records connector) (excluded) | AI chat assistants |
| Quo AI (formerly OpenPhone)Quo (formerly OpenPhone) | Some plans only | AI-powered features (call summaries, transcripts, Sona AI agent) (partly covered); SMS/MMS texting (excluded) | Meeting note-takers |
| Read AIRead AI | Some plans only | Ada (AI assistant) (excluded); Meeting reports, recaps and topic summaries (partly covered) | Meeting note-takers |
| RevRev.com, Inc. | Some plans only | Human transcription (excluded) | Transcription |
| Salesforce Agentforce / EinsteinSalesforce | Some plans only | Einstein GPT for Service / Sales / Commerce (partly covered); Einstein Bots (partly covered); Commerce Cloud Einstein; Marketing Cloud Einstein features in Marketing Cloud Next; Lightning Discover (excluded) | Customer support AI |
| Slack AISlack (Salesforce) | Some plans only | Third-party AI apps from the Slack Marketplace (excluded) | Workspace and collaboration AI |
| SupabaseSupabase | Some plans only | Third-party AI APIs called from Edge Functions or Postgres (e.g., OpenAI, Hugging Face) (excluded) | Cloud AI platforms |
| SynthflowSynthflow | Some plans only | Call recordings, transcripts and logs containing PHI (excluded) | AI voice agents |
| Twilio (Voice, ConversationRelay, Flex)Twilio | Some plans only | AI Assistants / Agent Copilot (excluded) | AI voice agents |
| UpToDate Expert AIWolters Kluwer | Some plans only | UpToDate Expert AI (generative clinical Q&A) (partly covered) | Clinical AI assistants |
| VapiVapi | Some plans only | Core voice pipeline (LLM, voice/TTS, transcriber/STT) (partly covered); Structured outputs (partly covered) | AI voice agents |
| Zendesk AIZendesk | Some plans only | Zendesk QA AI assist (partly covered); Early Access Program AI features and Built-by-Zendesk Marketplace apps (excluded) | Customer support AI |
| Zoom AI CompanionZoom Communications | Some plans only | Meeting Summary with AI Companion (partly covered); ZoomMate and other Zoom AI features (in-meeting questions, smart recording, Team Chat AI) (partly covered) | Meeting note-takers |
Verdicts summarize vendors’ published terms as of the date checked. A signed BAA is necessary but not sufficient for HIPAA compliance. Not legal advice.