Does Deepgram sign a BAA?

Only on some plans or setups

Deepgram signs BAAs for Enterprise customers, arranged through its sales team. It does not say whether Pay As You Go or Growth customers can get one, or which products the BAA covers.

Based on 4 sources, all from Deepgram unless marked.

Business associate
Deepgram
Tool
Deepgram
Plans with a BAA
Enterprise
Checked
Some plans only
Deepgram signs only for the plans listed.

By plan

PlanBAAHow to get itConditions
EnterpriseSigns a BAAThrough salesRequest pageThe pricing page says Deepgram signs BAAs for Enterprise customers handling ePHI. The docs say to contact Deepgram or your account executive to set one up.[1],[2]
Pay As You Go / GrowthNot confirmedNot statedThe pricing page mentions BAAs only for Enterprise and does not say self-serve tiers are ineligible.[1]
Self-hosted / on-prem deploymentNot confirmedNot statedDeepgram's medical transcription page presents self-hosted, on-prem deployment as a HIPAA-compliant option but does not mention a BAA.[3]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Deepgram says about each one.

AI featureUnder the BAADetails
Speech-to-text and text-to-speech APIsEnterpriseNot statedDeepgram calls itself a business associate for ePHI customers but publishes no list of products the BAA covers.[1],[2]
Voice Agent API (including the LLM 'think' step)EnterpriseNot statedNo official page addresses whether the Voice Agent API or its LLM step is inside the BAA.[2]

Speech-to-text and voice APIs that offer a BAA

All BAA-ready alternatives to Deepgram

Sources

  1. Deepgram PricingDeepgram, Documentation. Checked Oct 11, 2026.
  2. Data Privacy ComplianceDeepgram, Documentation. Checked Oct 11, 2026.
  3. AI Medical Scribes Transcription APIDeepgram, Documentation. Checked Oct 11, 2026.
  4. Information Security & PrivacyDeepgram, Documentation. Checked Oct 11, 2026.

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.