Does Coda AI (Superhuman Docs AI) sign a BAA?
Only on some plans or setups
Superhuman (Coda's parent) offers HIPAA compliance and a BAA only on the Docs Enterprise plan, through sales. It switches off Docs AI web search, vision, prompt caching and tool streaming for BAA customers, and does not say outright whether the core AI chat is inside the BAA.
Not fully covered by the BAA: Docs AI Web Search, Vision (image/PDF uploads), Prompt Caching / extended cache TTL, Tool Streaming.
- Business associate
- Superhuman (formerly Coda / Grammarly)
- Tool
- Coda AI (Superhuman Docs AI)
- Plans with a BAA
- Docs Enterprise
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Free / Pro / Team | No BAA | Not offered | Superhuman says HIPAA compliance is offered only on the Docs Enterprise plan.[1],[2] |
| Docs Enterprise | Signs a BAA | Through salesRequest page | A signed BAA is required. Recommended: SAML SSO, SCIM, Packs disabled or approval-gated, audit logs, restricted sharing and private-by-default folders. Keep PHI out of org names, domains and support requests. Packs, connectors and two-way sync are not covered by the BAA.[1] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Superhuman (formerly Coda / Grammarly) says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Docs AI chat / assistant (core)Docs Enterprise | Not stated | The HIPAA page lists only the Docs AI features that are switched off for BAA customers. It does not say outright that the remaining AI is covered by the BAA.[1] |
| Docs AI Web Search, Vision (image/PDF uploads), Prompt Caching / extended cache TTL, Tool StreamingDocs Enterprise | Excluded | Superhuman says these Docs AI features are unavailable to customers under its BAA.[1] |
| Superhuman Docs MCPDocs Enterprise | Covered | Superhuman says the Docs MCP itself is HIPAA-compliant. The customer must make sure any tool connected to it is too.[1] |
Workspace and collaboration AI that offer a BAA
- Adobe Acrobat AI AssistantBAA on: Acrobat Studio for enterprise: Analyzer in Acrobat, Acrobat Studio for enterprise: Knowledge Base in AcrobatSome plans only
- Airtable AIBAA on: Enterprise ScaleSome plans only
- Asana AIBAA on: AsanaGov, Enterprise+Some plans only
- Atlassian Rovo / Atlassian Intelligence (Confluence, Jira)BAA on: Enterprise, Standard / Premium (Jira, Jira Service Management, Jira Product Discovery, Confluence)Some plans only
- Box AIBAA on: Enterprise / Enterprise Plus / Enterprise AdvancedSome plans only
- ClickUp BrainBAA on: EnterpriseSome plans only
All BAA-ready alternatives to Coda AI (Superhuman Docs AI)
Sources
- HIPAA compliance information for Superhuman Docs
- Launched: Coda is now available for customers requiring HIPAA compliance
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.