Is DeepL HIPAA compliant?
Not confirmed. We couldn't find a Business Associate Agreement offer on DeepL's own pages. Without a signed BAA, keep patient data out of it.
Does DeepL sign a BAA?
Not confirmed
DeepL says its platform meets HIPAA requirements, but none of its public pages say it signs a BAA or name the plans that would get one. BAA availability is unknown, so ask DeepL sales for a signed BAA before any PHI goes in. The free translator keeps texts to train its models.
- Business associate
- DeepL
- Tool
- DeepL
- Plans with a BAA
- Not stated
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| DeepL Pro and Enterprise (Translator apps, Write) | Not confirmed | Not stated | DeepL's May 2025 press release, healthcare page, HIPAA blog post and trust center all say DeepL meets HIPAA requirements. None mention a BAA, how to get one, or which plans qualify. Pro texts are deleted once translated and not used for training. The healthcare page and blog point to Contact Sales.[1],[2],[3],[4],[5] |
| DeepL API Pro | Not confirmed | Not stated | The HIPAA blog post says the API runs on the same security stack as the apps but does not mention a BAA. The privacy policy treats API Pro like Pro: texts are deleted after processing and not used for training.[3],[5] |
| DeepL Free and DeepL API Free | Not confirmed | Not stated | The privacy policy says texts entered into the free translator are kept for a limited time and used to train DeepL's models. No page says a BAA is available on free use, and the HIPAA pages do not mention free use either.[5] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what DeepL says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Text and document translation (Translator apps and API) | Not stated | No BAA is documented, so no feature has documented BAA coverage. Pro and API Pro texts are not used for training. Free texts are.[3],[5] |
| DeepL Write and DeepL VoiceDeepL Pro and Enterprise (Translator apps, Write) | Not stated | The HIPAA blog post says Write and Voice share the same security stack, but no page ties either one to a BAA.[3] |
Translation AI that offer a BAA
- Amazon TranslateBAA on: AWS accounts (Sign up for AWS, advanced)Some plans only
- Azure AI TranslatorBAA on: Azure commercial customersSigns a BAA
- Google Cloud TranslationBAA on: Google Cloud customers (with a Services Agreement)Signs a BAA
All BAA-ready alternatives to DeepL
Compare DeepL
- DeepL vs Google Cloud TranslationGoogle Cloud Translation: signs a BAA
Sources
- DeepL achieves HIPAA compliance, setting new standard for secure, enterprise-ready AI solutions in healthcare
- DeepL for Healthcare
- How DeepL Language AI helps you safeguard health data with HIPAA
- DeepL Trust Center
- Privacy Policy
- Terms and Conditions (DeepL Pro)
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.