Does DeepSeek sign a BAA?

Not confirmed

Neither DeepSeek's app terms nor its API (Open Platform) terms mention HIPAA or a BAA, and the app terms tell users to avoid sharing sensitive personal data. No BAA offer was found.

Based on 2 sources, all from DeepSeek unless marked.

Business associate
DeepSeek
Tool
DeepSeek
Plans with a BAA
Not stated
Checked
Not confirmed
No BAA offer found on DeepSeek's own pages.

By plan

PlanBAAHow to get itConditions
DeepSeek app / web chatNot confirmedNot statedThe Terms of Use, which also cover APIs, advise users to avoid sharing sensitive personal data and do not mention HIPAA or BAAs.[1]
DeepSeek API (Open Platform)Not confirmedNot statedThe Open Platform terms (effective April 29, 2026) do not mention HIPAA, BAAs or data processing agreements.[2]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what DeepSeek says about each one.

AI featureUnder the BAADetails
DeepSeek chat models (app and API)Not statedNo BAA coverage statement exists. Outputs used for medical decisions require human review under the terms.[1],[2]

AI chat assistants that offer a BAA

  • ChatGPTBAA on: ChatGPT FedRAMP, ChatGPT for Clinicians, ChatGPT for Healthcare, Edu, EnterpriseSome plans only
  • Claude apps (Claude.ai)BAA on: Enterprise (self-serve or sales-assisted)Some plans only
  • GrokBAA on: API (ZDR-enabled)Some plans only
  • PerplexityBAA on: API (Sonar), Enterprise Pro / Enterprise MaxSome plans only
  • BastionGPTBAA on: API, Professional, Professional Plus, Ultra (Enterprise)Signs a BAA
  • CompliantChatGPTBAA on: Enterprise, Starter / Pro / FullSigns a BAA

All BAA-ready alternatives to DeepSeek

Sources

  1. DeepSeek Terms of UseDeepSeek, Legal terms. Checked Oct 11, 2026.
  2. DeepSeek Open Platform Terms of ServiceDeepSeek, Legal terms. Checked Oct 11, 2026.

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.