Are Box AI's AI features covered by the BAA?

Box AI (Q&A, summaries, extraction, Box AI agents): coverage not stated.

Does Box AI sign a BAA?

Q: Does Box AI sign a HIPAA BAA?

Only on some plans or setups. Box signs a BAA for Enterprise, Enterprise Plus and Enterprise Advanced accounts, requested by an admin in the Admin Console. Box's HIPAA and AI trust pages never say whether Box AI is inside the BAA, so AI coverage is unknown.

Only on some plans or setups

Box signs a BAA for Enterprise, Enterprise Plus and Enterprise Advanced accounts, requested by an admin in the Admin Console. Box's HIPAA and AI trust pages never say whether Box AI is inside the BAA, so AI coverage is unknown.

Based on 3 sources, all from Box unless marked.

Business associate: Box
Tool: Box AI
Plans with a BAA: Enterprise / Enterprise Plus / Enterprise Advanced
Checked: Oct 11, 2026

Some plans only

Box signs only for the plans listed.

By plan

Plan	BAA	How to get it	Conditions
Personal / Starter / Business	No BAA	Not offered	Box's HIPAA FAQ names only the three Enterprise editions as able to sign a BAA. These lower plans are not on that list.[1]
Enterprise / Enterprise Plus / Enterprise Advanced	Signs a BAA	Accept or sign online	An admin or co-admin requests it in the Admin Console under Account & Billing > HIPAA Compliance > Request a HIPAA BAA. Box Legal Operations emails the addendum within 3-5 business days. The BAA must be signed before any PHI is stored, and the customer must configure Box in a HIPAA-compliant way.[1]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Box says about each one.

AI feature	Under the BAA	Details
Box AI (Q&A, summaries, extraction, Box AI agents)Enterprise / Enterprise Plus / Enterprise Advanced	Not stated	Neither the HIPAA FAQ nor the Box AI Trust page mentions HIPAA, PHI or the BAA in relation to Box AI. Box says Box AI uses foundation models from several vendors, including Microsoft Azure and Google, and does not train on customer content without explicit approval.[1],[2],[3]

Workspace and collaboration AI that offer a BAA

Adobe Acrobat AI AssistantBAA on: Acrobat Studio for enterprise: Analyzer in Acrobat, Acrobat Studio for enterprise: Knowledge Base in AcrobatSome plans only
Airtable AIBAA on: Enterprise ScaleSome plans only
Asana AIBAA on: AsanaGov, Enterprise+Some plans only
Atlassian Rovo / Atlassian Intelligence (Confluence, Jira)BAA on: Enterprise, Standard / Premium (Jira, Jira Service Management, Jira Product Discovery, Confluence)Some plans only
ClickUp BrainBAA on: EnterpriseSome plans only
Coda AI (Superhuman Docs AI)BAA on: Docs EnterpriseSome plans only

All BAA-ready alternatives to Box AI

Sources

Box HIPAA and HITECH Overview and FAQBox, Help center. Checked Oct 11, 2026.
Box AI TrustBox, Trust center. Checked Oct 11, 2026.
Box Trust CenterBox, Trust center. Checked Oct 11, 2026.

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.