Does Character.AI sign a BAA?

Not confirmed

Character.AI's terms and help center don't mention HIPAA or a BAA, and the terms bar using it for medical advice. It has no business or API product. BAA availability is unknown.

Based on 3 sources, all from Character.AI unless marked.

Business associate
Character.AI
Tool
Character.AI
Plans with a BAA
Not stated
Checked
Not confirmed
No BAA offer found on Character.AI's own pages.

By plan

PlanBAAHow to get itConditions
Free / c.ai+ subscription (consumer)Not confirmedNot statedNo official page checked mentions HIPAA, PHI or a BAA. The only route for non-standard use is a general info@ email address offered to people asking about an API.[1],[2],[3]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Character.AI says about each one.

AI featureUnder the BAADetails
Character chat and Character Calls (voice)Not statedNo BAA is documented, so no feature has documented BAA coverage. The privacy policy lists improving AI models among its uses of collected information.[3]

AI chat assistants that offer a BAA

  • ChatGPTBAA on: ChatGPT FedRAMP, ChatGPT for Clinicians, ChatGPT for Healthcare, Edu, EnterpriseSome plans only
  • Claude apps (Claude.ai)BAA on: Enterprise (self-serve or sales-assisted)Some plans only
  • GrokBAA on: API (ZDR-enabled)Some plans only
  • PerplexityBAA on: API (Sonar), Enterprise Pro / Enterprise MaxSome plans only
  • BastionGPTBAA on: API, Professional, Professional Plus, Ultra (Enterprise)Signs a BAA
  • CompliantChatGPTBAA on: Enterprise, Starter / Pro / FullSigns a BAA

All BAA-ready alternatives to Character.AI

Sources

  1. Terms of ServiceCharacter Technologies, Legal terms. Checked Oct 12, 2026.
  2. Is there an API?Character.AI, Help center. Checked Oct 12, 2026.
  3. Privacy PolicyCharacter.AI, Help center. Checked Oct 12, 2026.

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.