Is Amazon Translate HIPAA compliant?
Only on the right plan. Amazon Web Services signs a Business Associate Agreement for Amazon Translate on AWS accounts (Sign up for AWS, advanced). Other plans aren't covered, so keep patient data out of them.
Does Amazon Translate sign a BAA?
Only on some plans or setups
Amazon Translate is on AWS's list of HIPAA-eligible services covered by the AWS BAA, which customers accept themselves in AWS Artifact. Accounts made with AWS's new sign-up experience cannot be designated for HIPAA. AWS may use Translate content to improve the service unless you opt out.
Not fully covered by the BAA: Service improvement use of content.
- Business associate
- Amazon Web Services
- Tool
- Amazon Translate
- Plans with a BAA
- AWS accounts (Sign up for AWS, advanced)
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| AWS accounts (Sign up for AWS, advanced) | Signs a BAA | Accept or sign onlineRequest page | Accept the AWS BAA in AWS Artifact in the Management Console, per account or across an organization. PHI should only go into HIPAA-eligible services, and Amazon Translate is on that list. Consider setting an AWS Organizations AI services opt-out policy so Translate content is not used to improve the service.[1],[2],[3] |
| AWS accounts created with the new sign-up experience | No BAA | Not offered | AWS tells customers with HIPAA workloads not to use the new sign-up experience. These accounts cannot be designated as HIPAA accounts.[4] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Amazon Web Services says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Real-time and batch text and document translationAWS accounts (Sign up for AWS, advanced) | Covered | Amazon Translate is listed with no qualifying note. AWS treats generally available features of listed services as eligible unless it says otherwise.[1] |
| Service improvement use of contentAWS accounts (Sign up for AWS, advanced) | Partly covered | AWS says Translate may store text inputs and use them to improve the service. Customers can opt out with an AWS Organizations AI services opt-out policy.[3] |
Translation AI that offer a BAA
- Azure AI TranslatorBAA on: Azure commercial customersSigns a BAA
- Google Cloud TranslationBAA on: Google Cloud customers (with a Services Agreement)Signs a BAA
All BAA-ready alternatives to Amazon Translate
Sources
- AWS Services in Scope by Compliance Program: HIPAA BAA
- HIPAA Compliance
- Amazon Translate FAQs
- Compare sign-up options
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.