Is Ada Health HIPAA compliant?
Only on the right plan. Ada Health signs a Business Associate Agreement with its customers on Enterprise partner deployments (health systems, payers). Other plans aren't covered, so keep patient data out of them. Ada Health doesn't say whether the BAA covers all of its AI features.
Does Ada Health sign a BAA?
Only on some plans or setups
Ada Health's US privacy policy says that when it provides services to or through a HIPAA covered entity, it handles protected health information as that entity's business associate. That covers health-system and payer deployments; the free consumer app has no published BAA route. Not related to Ada (ada.cx), the customer-support chatbot.
Not confirmed for the AI features: Ada Health doesn’t say whether its BAA covers LLM-based features using third-party model providers. Get that in writing before using it with patient data.
- Business associate
- Ada Health
- Tool
- Ada Health
- Plans with a BAA
- Enterprise partner deployments (health systems, payers)
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Enterprise partner deployments (health systems, payers) | Signs a BAA | Through sales | Ada says it acts as a HIPAA business associate when its services are provided to or through a covered entity, and shares assessments with that entity only to the minimum necessary. The policy does not use the phrase 'business associate agreement'; confirm the BAA in the partner contract. Contact is via the partnerships team on about.ada.com.[1],[2] |
| Ada app used directly by consumers | Not confirmed | Not stated | When people use the free app on their own, no covered entity is involved, and the consumer health data policy cites state health-privacy laws rather than HIPAA. A clinic pointing patients to the public app would have no BAA with Ada on that basis.[1],[3] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Ada Health says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Ada symptom assessment and care navigationEnterprise partner deployments (health systems, payers) | Covered | Ada's policy says PHI in covered-entity deployments is handled under its business associate role, which covers Ada's own processing in those deployments.[1] |
| LLM-based features using third-party model providersEnterprise partner deployments (health systems, payers) | Not stated | Ada says it uses third-party LLMs under signed data processing agreements and that user data does not train those models. It does not say the providers sign business associate agreements, so whether PHI sent to them stays inside BAA coverage is not documented.[1] |
Clinical AI assistants that offer a BAA
- Glass HealthBAA on: Glass Developer APISome plans only
- UpToDate Expert AIBAA on: Enterprise / institutional subscriptionSome plans only
- InfermedicaBAA on: Enterprise / API clients (health systems, payers, digital health)Signs a BAA
- OpenEvidenceBAA on: OpenEvidence accounts used by US covered entitiesSigns a BAA
- OverjetBAA on: Overjet customers under a Master Services AgreementSigns a BAA
- Viz.aiBAA on: Enterprise platform subscription (hospitals and health systems)Signs a BAA
All BAA-ready alternatives to Ada Health
Sources
Change history
- Ada Health: AI feature no longer tracked — Ada symptom assessment and care navigation (incl. LLM-based features) (our correction after re-checking the vendor's pages).
- Ada Health: AI feature tracked — LLM-based features using third-party model providers (Unknown) (our correction after re-checking the vendor's pages).
- Ada Health: AI feature tracked — Ada symptom assessment and care navigation (Covered) (our correction after re-checking the vendor's pages).
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.