Are CompliantChatGPT's AI features covered by the BAA?

AI chat with GPT and Gemini models (PHI Guard tokenization), projects, patient workspaces: covered by the baa. Live transcription: covered by the baa. Zoom integration: partly covered.

Does CompliantChatGPT sign a BAA?

Q: Does CompliantChatGPT sign a HIPAA BAA?

Yes, it signs a BAA. CompliantChatGPT, built by Light-it, includes a standard BAA on every paid plan, and Enterprise customers can negotiate changes to it. It also replaces HIPAA identifiers with tokens before messages reach the AI model.

Yes, it signs a BAA

CompliantChatGPT, built by Light-it, includes a standard BAA on every paid plan, and Enterprise customers can negotiate changes to it. It also replaces HIPAA identifiers with tokens before messages reach the AI model.

Based on 4 sources, all from Light-it unless marked.

Not fully covered by the BAA: Zoom integration.

Business associate: Light-it
Tool: CompliantChatGPT
Plans with a BAA: Starter / Pro / Full; Enterprise
Checked: Oct 12, 2026

Signs a BAA

Light-it signs a BAA for CompliantChatGPT.

By plan

Plan	BAA	How to get it	Conditions
Starter / Pro / Full	Signs a BAA	Request by email	Per-user plans; the pricing page lists 'Standard Business Associate Agreement included' on each. The HIPAA page says to request the BAA through its 'Request the BAA' link before rollout. The support page lists support@compliantchatgpt.com but does not name it as the BAA contact. The terms describe the BAA as executed separately between Light-it and the customer. Whether the free trial includes the BAA is unclear: the terms say it may apply to trials 'where applicable', while the HIPAA page names only paid plans.[1],[2],[3],[4]
Enterprise	Signs a BAA	Through sales	Custom pricing. Includes the standard BAA, and Enterprise customers may redline it.[1],[2]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Light-it says about each one.

AI feature	Under the BAA	Details
AI chat with GPT and Gemini models (PHI Guard tokenization), projects, patient workspaces	Covered	This is part of Compliant's own service, which the BAA covers. PHI Guard swaps the 18 HIPAA identifiers for tokens before a message reaches any AI model and restores them only in the user's view.[1],[2],[4]
Live transcription	Covered	Included on every plan as part of Compliant's service. The BAA's own scope text is not public.[2],[4]
Zoom integration	Partly covered	Available on Full and above. Compliant's BAA covers only Compliant's services. The customer must keep its own BAA with Zoom for Zoom's recording and transcription.[2],[4]

Compare CompliantChatGPT

ChatGPT vs CompliantChatGPTChatGPT: some plans
BastionGPT vs CompliantChatGPTBastionGPT: signs a BAA

Sources

HIPAA Compliant ChatGPT for HealthcareLight-it (CompliantChatGPT), Documentation. Checked Oct 12, 2026.
CompliantChatGPT PricingLight-it (CompliantChatGPT), Documentation. Checked Oct 12, 2026.
Terms and ConditionsLight-it (CompliantChatGPT), Legal terms. Checked Oct 12, 2026.
Compliant Support Policy & Help CenterLight-it (CompliantChatGPT), Help center. Checked Oct 12, 2026.

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.