Does ElevenLabs sign a BAA?
Only on some plans or setups
ElevenLabs signs a BAA only for Enterprise customers. It names ElevenAgents as a HIPAA-eligible service when Zero Retention Mode is on, with a restricted list of LLMs. ElevenLabs does not say whether its standalone text-to-speech and speech-to-text APIs fall under the BAA.
Not fully covered by the BAA: ElevenAgents without Zero Retention Mode; MCP tool support in agents.
- Business associate
- ElevenLabs
- Tool
- ElevenLabs
- Plans with a BAA
- Enterprise
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Enterprise | Signs a BAA | Through sales | BAAs are arranged through your account representative. For ElevenAgents, Zero Retention Mode must be on as well as the BAA. Without Zero Retention Mode, no PHI should be sent and the agent is not a covered service.[1],[2] |
| Non-Enterprise tiers | No BAA | Not offered | ElevenLabs says BAAs are available only on Enterprise subscriptions, and Zero Retention Mode is also Enterprise-only.[1],[2] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what ElevenLabs says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| ElevenAgents with Zero Retention ModeEnterprise | Covered | ElevenAgents is named as HIPAA-eligible. Under Zero Retention Mode the allowed LLMs are Gemini, Claude, OpenAI GPT models (only in Enterprise BAA workspaces) and ElevenLabs-hosted Qwen and GLM. Other LLMs are blocked. A custom LLM requires telling ElevenLabs support and having your own BAA with that provider. Analytics are limited to non-sensitive metadata.[1] |
| ElevenAgents without Zero Retention ModeEnterprise | Excluded | An agent without Zero Retention Mode is no longer a covered service under the BAA, and no PHI should be sent to it.[1] |
| MCP tool support in agentsEnterprise | Excluded | MCP is not available to users on Zero Retention Mode or those requiring HIPAA compliance.[2] |
| Text to Speech, Speech to Text, Text to Dialogue and Voice Changer APIsEnterprise | Not stated | These APIs support Zero Retention Mode, but the HIPAA page covers only ElevenAgents. No official page says whether the BAA covers them.[1],[2] |
| Dubbing, voice cloning, Music, Studio, Image & VideoEnterprise | Not stated | These products are not eligible for Zero Retention Mode. ElevenLabs does not address their BAA status.[2] |
Speech-to-text and voice APIs that offer a BAA
- Amazon Transcribe (incl. Transcribe Medical)BAA on: AWS accounts (Sign up for AWS, advanced)Some plans only
- AssemblyAIBAA on: Paid (upgraded) accountsSome plans only
- DeepgramBAA on: EnterpriseSome plans only
- Google Cloud Speech-to-TextBAA on: Google Cloud customers (with a Services Agreement)Signs a BAA
All BAA-ready alternatives to ElevenLabs
Sources
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.