Does Bubble sign a BAA?
No BAA available
Bubble's own manual says the platform and its company processes do not currently meet HIPAA standards and recommends against building HIPAA apps on it. No BAA is offered.
- Business associate
- Bubble
- Tool
- Bubble
- Plans with a BAA
- None
- Checked
No BAA
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| All plans (Free through Enterprise / dedicated) | No BAA | Not offered | The manual's HIPAA page says apps built on Bubble will not achieve HIPAA compliance and that Bubble does not recommend using it for HIPAA apps. No plan or dedicated deployment is named as an exception.[1] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Bubble says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Bubble AI (AI app generation / AI agent) | Excluded | The HIPAA page does not mention AI features, but its position covers the whole platform, so nothing is under a BAA.[1] |
AI coding tools that offer a BAA
- Claude CodeBAA on: Claude Console API key (Commercial org) with zero data retention, Claude Enterprise (HIPAA-ready)Some plans only
- CursorBAA on: EnterpriseSome plans only
- OpenAI CodexBAA on: ChatGPT for Healthcare / ChatGPT for Clinicians / Enterprise or Edu with Regulated Workspace, OpenAI API (API key sign-in) with Modified RetentionSome plans only
All BAA-ready alternatives to Bubble
Sources
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.