Is Dropbox HIPAA compliant?
Dropbox signs a Business Associate Agreement (BAA) only on Dropbox team plans (Standard, Advanced, Business, Business Plus, Enterprise, Education), but its terms leave 2 AI features fully or partly outside the BAA. Other plans aren't covered, so keep patient data out of them.
Does Dropbox sign a BAA?
Only on some plans or setups
Dropbox signs a BAA for certain teams on its team plans; existing US team admins can e-sign it in the admin console, and new buyers go through sales. Personal plans aren't included. Dash, including Dash in Dropbox, doesn't support HIPAA compliance, and third-party apps aren't covered.
Not fully covered by the BAA: Dash and Dash in Dropbox (AI search, Dash Chat, file summaries and Q&A); Third-party apps and integrations (including AI tools you connect).
- Business associate
- Dropbox
- Tool
- Dropbox (incl. Dropbox AI / Dash)
- Plans with a BAA
- Dropbox team plans (Standard, Advanced, Business, Business Plus, Enterprise, Education)
- Checked
By plan
| Plan | BAA available | AI features covered | How to get it | Notes |
|---|---|---|---|---|
| Dropbox team plans (Standard, Advanced, Business, Business Plus, Enterprise, Education) | Conditions apply | 2 left out | Accept or sign online | Dropbox's HIPAA article applies to 'certain teams' on these plans without saying which teams qualify. Existing US-based team admins can sign the BAA electronically on the Account page of the admin console; new buyers contact sales. A team with a BAA can't enable reseller support. Core file storage and sharing only: Dash and third-party apps are outside it.[1],[2] |
| Personal plans (Basic, Plus) | No BAA | — | Not offered | The HIPAA article lists only team plans, and the plan comparison shows 'Enable HIPAA compliance' as not included on Plus.[1],[2] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Dropbox says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Dash and Dash in Dropbox (AI search, Dash Chat, file summaries and Q&A)Dropbox team plans (Standard, Advanced, Business, Business Plus, Enterprise, Education) | Excluded | Dropbox says Dash doesn't support compliance with HIPAA, including Dash in Dropbox. Its 'Dropbox AI' help page now describes these features as Dash. See the Dropbox Dash listing.[1],[3] |
| Third-party apps and integrations (including AI tools you connect)Dropbox team plans (Standard, Advanced, Business, Business Plus, Enterprise, Education) | Excluded | Dropbox says third-party apps and integrations aren't part of its included services and aren't covered by a BAA you sign with it.[1] |
What the BAA doesn’t cover
- Personal plans (Basic, Plus): no BAA. Keep patient data out.
- Dash and Dash in Dropbox (AI search, Dash Chat, file summaries and Q&A): outside the BAA (Dropbox team plans (Standard, Advanced, Business, Business Plus, Enterprise, Education)).
- Third-party apps and integrations (including AI tools you connect): outside the BAA (Dropbox team plans (Standard, Advanced, Business, Business Plus, Enterprise, Education)).
Integrations and third-party apps you connect usually need their own BAA. Check each one before it touches patient data.
Dropbox and Dash
The answer depends on the product and the account you sign in with.
- DropboxDropbox file storage and sharing on team plansSome plans only
- Dropbox DashDash and Dash in Dropbox, the AI search and chat featuresNo BAA
Workspace and collaboration AI that offer a BAA
- Adobe Acrobat AI AssistantBAA on: Acrobat Studio for enterprise: Analyzer in Acrobat, Acrobat Studio for enterprise: Knowledge Base in AcrobatSome plans only
- Airtable AIBAA on: Enterprise ScaleSome plans only
- Asana AIBAA on: AsanaGov, Enterprise+Some plans only
- Atlassian Rovo / Atlassian Intelligence (Confluence, Jira)BAA on: Enterprise, Standard / Premium (Jira, Jira Service Management, Jira Product Discovery, Confluence)Some plans only
- Box (incl. Box AI)BAA on: Enterprise / Enterprise Plus / Enterprise AdvancedSome plans only
- ClickUp BrainBAA on: EnterpriseSome plans only
All BAA-ready alternatives to Dropbox (incl. Dropbox AI / Dash)
FAQ
Is Dropbox HIPAA compliant?
Dropbox signs a Business Associate Agreement (BAA) only on Dropbox team plans (Standard, Advanced, Business, Business Plus, Enterprise, Education), but its terms leave 2 AI features fully or partly outside the BAA. Other plans aren't covered, so keep patient data out of them. A signed BAA is required but isn't enough on its own: HIPAA compliance also depends on how you set up and use Dropbox.
Does Dropbox sign a BAA for Dropbox?
Only on some plans or setups. Dropbox signs a BAA for certain teams on its team plans; existing US team admins can e-sign it in the admin console, and new buyers go through sales. Personal plans aren't included. Dash, including Dash in Dropbox, doesn't support HIPAA compliance, and third-party apps aren't covered.
Are Dropbox's AI features covered by the BAA?
Dash and Dash in Dropbox (AI search, Dash Chat, file summaries and Q&A): excluded from the baa. Third-party apps and integrations (including AI tools you connect): excluded from the baa.
Is Dropbox AI covered by the BAA?
Dropbox: a BAA only on Dropbox team plans. Dropbox Dash: no BAA.
When did we last check Dropbox?
We last verified Dropbox against Dropbox's own pages on Oct 15, 2026. Each listing is re-checked on a schedule, and a daily monitor flags changes to the vendor pages it cites.
Sources
Cite this
AI Vendor BAA Check. (n.d.). Is Dropbox HIPAA compliant? BAA status by plan. Retrieved October 15, 2026, from https://aivendorbaacheck.com/tools/dropbox
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.