Does Adobe Acrobat AI Assistant sign a BAA?
Only on some plans or setups
The standard Acrobat AI Assistant is not on Adobe's HIPAA-Ready list, so it is not available for PHI. Adobe does sign a BAA for Knowledge Base in Acrobat (including its AI Assistant) and Analyzer in Acrobat under Acrobat Studio for enterprise, after Adobe enables HIPAA readiness.
Not fully covered by the BAA: Acrobat AI Assistant (general document chat, summaries); PDF Spaces.
- Business associate
- Adobe
- Tool
- Adobe Acrobat AI Assistant
- Plans with a BAA
- Acrobat Studio for enterprise: Knowledge Base in Acrobat; Acrobat Studio for enterprise: Analyzer in Acrobat
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Acrobat AI Assistant (add-on / Acrobat Studio, individual, teams and enterprise) | No BAA | Not offered | Not on Adobe's HIPAA-Ready services list, and Adobe says PHI may not be processed in services not designated HIPAA-Ready. Adobe's AI Assistant security fact sheet and enterprise data-governance blog do not mention HIPAA or BAAs.[1],[2],[3] |
| Acrobat Studio for enterprise: Knowledge Base in Acrobat | Conditions apply | Through salesAdobe sales representative or customer success manager | Listed as HIPAA-Ready. Requires an applicable BAA with Adobe and Adobe-enabled HIPAA readiness before any PHI. The HIPAA configuration requires PDF Spaces integration to be disabled, and admins cannot turn it back on. Current guidance applies to U.S. HIPAA covered entities.[1],[4],[5] |
| Acrobat Studio for enterprise: Analyzer in Acrobat | Conditions apply | Through salesAdobe sales contact (provide Account ID and state intent to process PHI) | Listed as HIPAA-Ready. A signed BAA alone is not enough; Adobe must enable HIPAA readiness, shown as a read-only 'Linked HIPAA Business Associate Agreement' setting. Current guidance applies to U.S. HIPAA covered entities.[1],[6],[7] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Adobe says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Acrobat AI Assistant (general document chat, summaries)Acrobat AI Assistant (add-on / Acrobat Studio, individual, teams and enterprise) | Excluded | Not on the HIPAA-Ready list, so it is outside BAA coverage.[1] |
| AI Assistant within Knowledge Base in AcrobatAcrobat Studio for enterprise: Knowledge Base in Acrobat | Covered | Adobe's enablement guide says AI Assistant remains available as a Knowledge Base access method in the HIPAA-ready configuration.[5] |
| PDF SpacesAcrobat Studio for enterprise: Knowledge Base in Acrobat | Excluded | PDF Spaces is not on the HIPAA-Ready list, and its integration with Knowledge Base must be disabled for the HIPAA configuration.[1],[4],[5] |
| Analyzer in Acrobat (enterprise document intelligence)Acrobat Studio for enterprise: Analyzer in Acrobat | Covered | Covered once a BAA is in place and Adobe has enabled HIPAA readiness.[1],[6],[7] |
Workspace and collaboration AI that offer a BAA
- Airtable AIBAA on: Enterprise ScaleSome plans only
- Asana AIBAA on: AsanaGov, Enterprise+Some plans only
- Atlassian Rovo / Atlassian Intelligence (Confluence, Jira)BAA on: Enterprise, Standard / Premium (Jira, Jira Service Management, Jira Product Discovery, Confluence)Some plans only
- Box AIBAA on: Enterprise / Enterprise Plus / Enterprise AdvancedSome plans only
- ClickUp BrainBAA on: EnterpriseSome plans only
- Coda AI (Superhuman Docs AI)BAA on: Docs EnterpriseSome plans only
All BAA-ready alternatives to Adobe Acrobat AI Assistant
Sources
- HIPAA and Adobe Products and Services
- Adobe Acrobat AI Assistant Security Fact Sheet (January 2025)
- Adobe Acrobat AI Assistant for enterprise: our commitment to data governance and security
- Security and compliance for Knowledge Base in Acrobat
- Enable HIPAA readiness for Knowledge Base in Acrobat
- Enable HIPAA readiness for Analyzer in Acrobat
- View HIPAA readiness status in Analyzer in Acrobat
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.