Is Docusign AI HIPAA compliant?
Only on the right plan. Docusign signs a Business Associate Agreement with its customers on eSignature / IAM for HIPAA covered entities (plan not specified). Other plans aren't covered, so keep patient data out of them. Docusign doesn't say whether the BAA covers its AI features.
Does Docusign AI sign a BAA?
Only on some plans or setups
Docusign's healthcare page says it offers a BAA and may enter into one with HIPAA covered entities, and its HIPAA blog says it acts as a business associate for eSignature with PHI. It publishes no plan list or request process, and its AI terms and AI feature pages say nothing about PHI or the BAA, so coverage of Iris-powered features is unknown.
Not confirmed for the AI features: Docusign doesn’t say whether its BAA covers Iris-powered AI (agreement summaries and Q&A, AI-assisted review, IAM data extraction and search). Get that in writing before using it with patient data.
- Business associate
- Docusign
- Tool
- Docusign AI
- Plans with a BAA
- eSignature / IAM for HIPAA covered entities (plan not specified)
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| eSignature / IAM for HIPAA covered entities (plan not specified) | Conditions apply | Not stated | Docusign's healthcare page says it offers a BAA, may enter into one with covered entities, and that IAM supports BAAs; its HIPAA blog says it is a business associate when a provider uses eSignature for PHI. Neither names eligible plans or how to request the BAA beyond Contact Sales; the BAA text is not published. Sales line on Docusign legal pages: 1-877-720-2040.[1],[2] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Docusign says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Iris-powered AI (agreement summaries and Q&A, AI-assisted review, IAM data extraction and search) | Not stated | Neither the HIPAA pages nor the AI Attachment say whether AI features fall under the BAA. Under the July 2026 AI Attachment, IAM customers and web-plan eSignature bought on or after July 8, 2026 consent by default to anonymized, aggregated AI training, with an opt-out toggle. The attachment also refers to third-party AI models not developed by Docusign.[3],[4],[1] |
Workspace and collaboration AI that offer a BAA
- Adobe Acrobat AI AssistantBAA on: Acrobat Studio for enterprise: Analyzer in Acrobat, Acrobat Studio for enterprise: Knowledge Base in AcrobatSome plans only
- Airtable AIBAA on: Enterprise ScaleSome plans only
- Asana AIBAA on: AsanaGov, Enterprise+Some plans only
- Atlassian Rovo / Atlassian Intelligence (Confluence, Jira)BAA on: Enterprise, Standard / Premium (Jira, Jira Service Management, Jira Product Discovery, Confluence)Some plans only
- Box AIBAA on: Enterprise / Enterprise Plus / Enterprise AdvancedSome plans only
- ClickUp BrainBAA on: EnterpriseSome plans only
All BAA-ready alternatives to Docusign AI
Sources
- Docusign for Healthcare
- Is Docusign eSignature HIPAA Compliant?
- AI Attachment for Docusign Services
- Introducing AI-Assisted Agreement Summaries and Q&A in Docusign eSignature
Change history
- Docusign AI — eSignature / IAM for HIPAA covered entities (plan not specified): updated conditions (our correction after re-checking the vendor's pages).
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.