Does Amazon Q Business sign a BAA?
Yes, it signs a BAA
Amazon Q Business is a HIPAA-eligible AWS service, so it is covered by the AWS BAA that customers accept in AWS Artifact. AWS has closed Q Business to new customers and recommends Amazon Quick instead.
- Business associate
- Amazon Web Services
- Tool
- Amazon Q Business
- Plans with a BAA
- Q Business Lite / Pro (existing customers)
- Checked
Signs a BAA
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Q Business Lite / Pro (existing customers) | Signs a BAA | Accept or sign onlineRequest page | Covered under the standard AWS BAA, accepted in AWS Artifact, in all Regions where Q Business is offered. Closed to new customers, with existing customers receiving only bug fixes and security updates.[1],[2],[3],[4],[5] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Amazon Web Services says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Q Business assistant (enterprise-data Q&A, summarization, content generation, actions) | Covered | The service is on AWS's HIPAA BAA list. AWS does not break coverage down by feature.[2],[3] |
Compare Amazon Q Business
- Glean vs Amazon Q BusinessGlean: signs a BAA
Sources
- HIPAA Compliance
- AWS Services in Scope by Compliance Program: HIPAA BAA
- Compliance validation for Amazon Q Business
- Amazon Q Business is now HIPAA eligible
- Amazon Q Business availability change
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.