Does Character.AI sign a BAA?
Not confirmed
Character.AI's terms and help center don't mention HIPAA or a BAA, and the terms bar using it for medical advice. It has no business or API product. BAA availability is unknown.
- Business associate
- Character.AI
- Tool
- Character.AI
- Plans with a BAA
- Not stated
- Checked
Not confirmed
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Free / c.ai+ subscription (consumer) | Not confirmed | Not stated | No official page checked mentions HIPAA, PHI or a BAA. The only route for non-standard use is a general info@ email address offered to people asking about an API.[1],[2],[3] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Character.AI says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Character chat and Character Calls (voice) | Not stated | No BAA is documented, so no feature has documented BAA coverage. The privacy policy lists improving AI models among its uses of collected information.[3] |
AI chat assistants that offer a BAA
- ChatGPTBAA on: ChatGPT FedRAMP, ChatGPT for Clinicians, ChatGPT for Healthcare, Edu, EnterpriseSome plans only
- Claude apps (Claude.ai)BAA on: Enterprise (self-serve or sales-assisted)Some plans only
- GrokBAA on: API (ZDR-enabled)Some plans only
- PerplexityBAA on: API (Sonar), Enterprise Pro / Enterprise MaxSome plans only
- BastionGPTBAA on: API, Professional, Professional Plus, Ultra (Enterprise)Signs a BAA
- CompliantChatGPTBAA on: Enterprise, Starter / Pro / FullSigns a BAA
All BAA-ready alternatives to Character.AI
Sources
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.