Are Amazon Q Developer's AI features covered by the BAA?

IDE plugins, CLI and console chat: excluded from the baa.

Does Amazon Q Developer sign a BAA?

Q: Does Amazon Q Developer sign a HIPAA BAA?

No BAA available. Amazon Q Developer is not on AWS's list of HIPAA-eligible services, and AWS says PHI should be processed only in listed services, so the AWS BAA does not cover it. AWS is ending support for the Q Developer IDE plugins and points users to Kiro.

No BAA available

Amazon Q Developer is not on AWS's list of HIPAA-eligible services, and AWS says PHI should be processed only in listed services, so the AWS BAA does not cover it. AWS is ending support for the Q Developer IDE plugins and points users to Kiro.

Based on 4 sources, all from Amazon Web Services unless marked.

Business associate: Amazon Web Services
Tool: Amazon Q Developer
Plans with a BAA: None
Checked: Oct 11, 2026

No BAA

Amazon Web Services won't sign a BAA for Amazon Q Developer.

By plan

Plan	BAA	How to get it	Conditions
Free / Pro tier	No BAA	Not offered	The AWS BAA (accepted in AWS Artifact) covers only listed HIPAA-eligible services. Amazon Q Developer is not listed, though Amazon Q Business is.[1],[2],[3]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Amazon Web Services says about each one.

AI feature	Under the BAA	Details
IDE plugins, CLI and console chat	Excluded	Not a HIPAA-eligible service, so it is outside the AWS BAA. The IDE plugins reach end of support on April 30, 2027.[2],[4]

AI coding tools that offer a BAA

Claude CodeBAA on: Claude Console API key (Commercial org) with zero data retention, Claude Enterprise (HIPAA-ready)Some plans only
CursorBAA on: EnterpriseSome plans only
OpenAI CodexBAA on: ChatGPT for Healthcare / ChatGPT for Clinicians / Enterprise or Edu with Regulated Workspace, OpenAI API (API key sign-in) with Modified RetentionSome plans only

All BAA-ready alternatives to Amazon Q Developer

Sources

HIPAA ComplianceAmazon Web Services, Trust center. Checked Oct 11, 2026.
AWS Services in Scope by Compliance Program: HIPAA BAAAmazon Web Services, Documentation. Checked Oct 11, 2026.
Compliance validation for Amazon Q DeveloperAWS, Documentation. Checked Oct 11, 2026.
Coding Assistant - Amazon Q Developer - AWSAWS, Documentation. Checked Oct 11, 2026.

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.