AI Vendor BAA Check report · October 2026 edition
How many AI tools sign a HIPAA BAA?
We checked 250 AI tools against their vendors’ own terms, plan by plan and AI feature by AI feature. Here’s which AI tools healthcare teams can use with patient data, and where the gaps are.
Frozen edition. These figures were captured on Oct 14, 2026 and won’t change, so they’re safe to cite. For today’s numbers, see the live report.
Key findings
Each finding is one sentence you can quote. “Copy with credit” adds the source and a link to it.
160 of the 250 AI tools we checked (64%) offer a HIPAA business associate agreement (BAA) on at least one plan.
86 (34%) sign one on all the plans we list. For 74 more (30%), the BAA depends on the plan, edition or setup.
Of the 160 tools that offer a BAA and that we checked feature by feature, 51 (32%) leave at least one AI feature fully or partly outside it.
5 of the 55 tools with a free plan include a BAA on that free plan.
30 tools (12%) say they don't sign a BAA or bar patient data. For 60 (24%), the vendor's own pages don't say either way.
By kind of tool (counting kinds with at least 5 listed), the share offering a BAA is highest among cloud AI platforms (100% of 10) and lowest among revenue cycle and medical coding AI tools (17% of 6).
For 64 of the 160 tools that offer a BAA (40%), the easiest route still runs through a sales team; 71 (44%) let you accept it online or include it in the terms.
The BAA usually depends on the plan
74 of the 160 tools that offer a BAA sign it only on certain plans, editions or setups. Free and personal accounts are rarely covered: of the 55 tools that list a free plan, 5 include a BAA on it.
- Sign a BAA on all listed plans: 86
- Some plans or setups only: 74
- No BAA: 30
- Not confirmed: 60
By kind of tool
| Category | Tools | Offer a BAA | Breakdown |
|---|---|---|---|
| Cloud AI platforms | 10 | 100% | |
| Productivity suite AI | 2 | 100% | |
| EHR and practice software AI | 10 | 90% | |
| AI medical scribes | 34 | 88% | |
| Patient communication AI | 14 | 86% | |
| Speech-to-text and voice APIs | 7 | 86% | |
| AI voice agents | 21 | 81% | |
| Customer support AI | 14 | 71% | |
| Meeting note-takers | 18 | 67% | |
| Workspace and collaboration AI | 28 | 61% | |
| LLM APIs | 13 | 54% | |
| AI chat assistants | 14 | 50% | |
| Transcription | 6 | 50% | |
| Clinical AI assistants | 17 | 41% | |
| Translation AI | 10 | 30% | |
| Writing assistants | 7 | 29% | |
| AI coding tools | 19 | 26% | |
| Revenue cycle and coding AI | 6 | 17% |
The AI features are where the gaps are
A BAA for the product doesn’t always cover its AI. Of the 160 tools that offer a BAA and that we checked feature by feature, 51 (32%) leave at least one AI feature fully or partly outside it, and 92 (57%) don’t say whether at least one AI feature is covered. 43 (27%) state that all the AI features we list are inside the BAA.
How you get the BAA
For each tool that offers a BAA, the easiest route on a qualifying plan:
2 tools that offer a BAA set a minimum number of seats on each qualifying plan.
Download the data
The full dataset behind this edition, frozen on Oct 14, 2026. CSV files open in Excel, Google Sheets or any stats package.
- Tools CSVone row per tool, with its verdict
- Plans CSVone row per plan or setup
- AI features CSVcoverage of each AI feature
- Sources CSVthe vendor pages each verdict rests on
Column definitions, terms of use and past versions are on the dataset page.
Method
Each verdict comes from the vendor’s own trust center, HIPAA page, help center or legal terms, with a link and the date we checked it. When a vendor’s pages don’t say, we record “not confirmed”, never a guess. Percentages are of the tools we track, not of the whole market. How we check.
Cite this edition
AI Vendor BAA Check. (2026, October 14). How many AI tools sign a HIPAA BAA? October 2026 edition. https://aivendorbaacheck.com/report/2026-10
Free to cite and quote with a link. Reporters: the press page has chart images and a media contact, and you can embed these charts.
This is October 2026 edition. Verdicts summarize vendors’ published terms. Not legal advice.