Are Artera's AI features covered by the BAA?

Artera AI Agents: coverage not stated.

Is Artera HIPAA compliant?

Q: Does Artera sign a HIPAA BAA?

Yes, it signs a BAA. Artera's customer Terms of Service define a BAA covering HIPAA data in its services and incorporate it by reference, and its privacy policy says patient PHI is governed by the BAA or services agreement with the provider. Its AI Agents FAQ says PHI is never used to train models but doesn't say whether the BAA covers the agents.

Artera signs a Business Associate Agreement with its customers, which HIPAA requires before a vendor handles patient data for you. Once it's signed, you can use Artera with patient data within the BAA's scope; whether your use is compliant still depends on your setup and your own policies. Artera doesn't say whether the BAA covers its AI features.

Does Artera sign a BAA?

Yes, it signs a BAA

Artera's customer Terms of Service define a BAA covering HIPAA data in its services and incorporate it by reference, and its privacy policy says patient PHI is governed by the BAA or services agreement with the provider. Its AI Agents FAQ says PHI is never used to train models but doesn't say whether the BAA covers the agents.

Based on 4 sources, all from Artera unless marked.

Not confirmed for the AI features: Artera doesn’t say whether its BAA covers Artera AI Agents. Get that in writing before using it with patient data.

Business associate: Artera
Tool: Artera
Plans with a BAA: Artera enterprise contract (health systems and practices)
Checked: Oct 13, 2026

Signs a BAA

Artera signs a BAA with its customers; AI coverage isn't stated.

By plan

Plan	BAA	How to get it	Conditions
Artera enterprise contract (health systems and practices)	Signs a BAA	Through sales	Artera's Terms of Service (between WELL Health d/b/a Artera and the customer on the order form) incorporate a BAA governing HIPAA data in the services, and list it in the entire-agreement clause where applicable. The privacy policy says PHI is governed by the BAA or services agreement with the provider. No public BAA template or request process was found, and no plan restrictions are stated.[1],[2]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Artera says about each one.

AI feature	Under the BAA	Details
Artera AI Agents	Not stated	The AI Agents FAQ claims HIPAA compliance, SOC 2 Type 2 and HITRUST, and says PHI and PII are never used to train models. It doesn't mention a BAA or name LLM providers, and the Terms of Service don't mention AI, so whether the agents fall within the BAA is not stated.[3],[4],[1]

Compare Artera

Luma Health vs ArteraLuma Health: signs a BAA

Sources

Terms of Service | ArteraArtera, Legal terms. Checked Oct 13, 2026. Archived copy
Privacy Policy | ArteraArtera, Legal terms. Checked Oct 13, 2026. Archived copy
Artera's AI Agents: Frequently Asked Questions (FAQs)Artera, Documentation. Checked Oct 13, 2026. Archived copy
Trust Center | ArteraArtera, Trust center. Checked Oct 13, 2026. Archived copy

Change history

Oct 13, 2026Artera — Artera enterprise contract (health systems and practices): updated conditions (our correction after re-checking the vendor's pages).

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.