Are Bolt.new's AI features covered by the BAA?

Bolt AI app generation (prompts, code, files): coverage not stated.

Does Bolt.new sign a BAA?

Q: Does Bolt.new sign a HIPAA BAA?

Not confirmed. Neither Bolt.new nor StackBlitz mentions HIPAA or BAAs on the pages reviewed. The privacy policy tells users not to submit sensitive personal information unless they are authorized to.

Not confirmed

Neither Bolt.new nor StackBlitz mentions HIPAA or BAAs on the pages reviewed. The privacy policy tells users not to submit sensitive personal information unless they are authorized to.

Based on 4 sources, all from StackBlitz unless marked.

Business associate: StackBlitz
Tool: Bolt.new
Plans with a BAA: Not stated
Checked: Oct 11, 2026

Not confirmed

No BAA offer found on StackBlitz's own pages.

By plan

Plan	BAA	How to get it	Conditions
Free / Pro / Teams	Not confirmed	Not stated	The pricing page lists no security or compliance features for these plans and does not mention HIPAA.[1]
Enterprise	Not confirmed	Through sales	Enterprise lists 'compliance support' and data governance and retention policies, but no page mentions a BAA or HIPAA.[1],[2]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what StackBlitz says about each one.

AI feature	Under the BAA	Details
Bolt AI app generation (prompts, code, files)Enterprise	Not stated	StackBlitz says it does not seek sensitive personal data and that users should submit it only if authorized. There is no PHI-specific term or BAA.[3]

AI coding tools that offer a BAA

Claude CodeBAA on: Claude Console API key (Commercial org) with zero data retention, Claude Enterprise (HIPAA-ready)Some plans only
CursorBAA on: EnterpriseSome plans only
OpenAI CodexBAA on: ChatGPT for Healthcare / ChatGPT for Clinicians / Enterprise or Edu with Regulated Workspace, OpenAI API (API key sign-in) with Modified RetentionSome plans only

All BAA-ready alternatives to Bolt.new

Sources

Bolt PricingStackBlitz, Documentation. Checked Oct 11, 2026.
StackBlitz EnterpriseStackBlitz, Documentation. Checked Oct 11, 2026.
StackBlitz Privacy PolicyStackBlitz, Legal terms. Checked Oct 11, 2026.
Is Bolt.new HIPAA Compliant? What StackBlitz SaysHIPAA Vault, Third party. Checked Oct 11, 2026.

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.