Does Dropbox Dash / Dropbox AI sign a BAA?
No BAA available
Dropbox signs a BAA for certain team plans, but it says Dash, including Dash in Dropbox, does not support HIPAA compliance. Dropbox's 'Dropbox AI' overview page now describes Dash features, so the AI features fall outside HIPAA support.
- Business associate
- Dropbox
- Tool
- Dropbox Dash / Dropbox AI
- Plans with a BAA
- Dropbox team plans (Standard, Advanced, Business, Business Plus, Enterprise, Education) - core storage only
- Checked
No BAA
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Dropbox team plans (Standard, Advanced, Business, Business Plus, Enterprise, Education) - core storage only | Conditions apply | Accept or sign onlinesales@dropbox.com | The HIPAA article says it applies to 'certain teams' on these plans but does not say which teams qualify. Existing US-based team admins can e-sign the BAA on the Account page of the admin console. New buyers contact sales. A team with a BAA cannot enable reseller support. Third-party apps are not covered.[1] |
| Dropbox Dash (standalone and Dash in Dropbox) | No BAA | Not offered | Dropbox says Dash does not support HIPAA compliance, including Dash inside Dropbox.[1] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Dropbox says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Dash (universal search, Dash Chat, answers across connected apps)Dropbox team plans (Standard, Advanced, Business, Business Plus, Enterprise, Education) - core storage only | Excluded | Dropbox's HIPAA article says Dash does not support HIPAA compliance. Dash Chat web search uses OpenAI's web search API.[1],[2] |
| Dash in Dropbox / Dropbox AI features (file summaries, Q&A, image search)Dropbox team plans (Standard, Advanced, Business, Business Plus, Enterprise, Education) - core storage only | Excluded | The 'Dropbox AI: an overview' help page now describes these as Dash features. The HIPAA article excludes Dash, including Dash in Dropbox.[1],[2] |
Workspace and collaboration AI that offer a BAA
- Adobe Acrobat AI AssistantBAA on: Acrobat Studio for enterprise: Analyzer in Acrobat, Acrobat Studio for enterprise: Knowledge Base in AcrobatSome plans only
- Airtable AIBAA on: Enterprise ScaleSome plans only
- Asana AIBAA on: AsanaGov, Enterprise+Some plans only
- Atlassian Rovo / Atlassian Intelligence (Confluence, Jira)BAA on: Enterprise, Standard / Premium (Jira, Jira Service Management, Jira Product Discovery, Confluence)Some plans only
- Box AIBAA on: Enterprise / Enterprise Plus / Enterprise AdvancedSome plans only
- ClickUp BrainBAA on: EnterpriseSome plans only
All BAA-ready alternatives to Dropbox Dash / Dropbox AI
Sources
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.