Does Deepgram sign a BAA?
Only on some plans or setups
Deepgram signs BAAs for Enterprise customers, arranged through its sales team. It does not say whether Pay As You Go or Growth customers can get one, or which products the BAA covers.
- Business associate
- Deepgram
- Tool
- Deepgram
- Plans with a BAA
- Enterprise
- Checked
Some plans only
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Enterprise | Signs a BAA | Through salesRequest page | The pricing page says Deepgram signs BAAs for Enterprise customers handling ePHI. The docs say to contact Deepgram or your account executive to set one up.[1],[2] |
| Pay As You Go / Growth | Not confirmed | Not stated | The pricing page mentions BAAs only for Enterprise and does not say self-serve tiers are ineligible.[1] |
| Self-hosted / on-prem deployment | Not confirmed | Not stated | Deepgram's medical transcription page presents self-hosted, on-prem deployment as a HIPAA-compliant option but does not mention a BAA.[3] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Deepgram says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Speech-to-text and text-to-speech APIsEnterprise | Not stated | Deepgram calls itself a business associate for ePHI customers but publishes no list of products the BAA covers.[1],[2] |
| Voice Agent API (including the LLM 'think' step)Enterprise | Not stated | No official page addresses whether the Voice Agent API or its LLM step is inside the BAA.[2] |
Speech-to-text and voice APIs that offer a BAA
- Amazon Transcribe (incl. Transcribe Medical)BAA on: AWS accounts (Sign up for AWS, advanced)Some plans only
- AssemblyAIBAA on: Paid (upgraded) accountsSome plans only
- ElevenLabsBAA on: EnterpriseSome plans only
- Google Cloud Speech-to-TextBAA on: Google Cloud customers (with a Services Agreement)Signs a BAA
All BAA-ready alternatives to Deepgram
Sources
- Deepgram Pricing
- Data Privacy Compliance
- AI Medical Scribes Transcription API
- Information Security & Privacy
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.