Does Fireworks AI sign a BAA?

Not confirmed

Fireworks announced in 2023 that its platform had achieved HIPAA compliance, but none of the official pages we could read say whether it signs a BAA, on which plans, or how. BAA availability is unknown.

Based on 2 sources, all from Fireworks AI unless marked.

Business associate
Fireworks AI
Tool
Fireworks AI
Plans with a BAA
Not stated
Checked
Not confirmed
No BAA offer found on Fireworks AI's own pages.

By plan

PlanBAAHow to get itConditions
All plans (Developer, Enterprise)Not confirmedNot statedAn official October 2023 blog post claims SOC 2 Type II and HIPAA compliance but does not mention BAAs or plans. The privacy policy does not mention HIPAA.[1],[2]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Fireworks AI says about each one.

AI featureUnder the BAADetails
Serverless / dedicated inference and fine-tuningNot statedWe found no official BAA scope statement.[1]

LLM APIs that offer a BAA

  • Claude API (Claude Platform)BAA on: First-party API (custom / negotiated BAA), First-party API (self-serve Console enablement)Some plans only
  • CohereBAA on: Custom model development engagementSome plans only
  • GroqCloudBAA on: GroqCloud paid, generally available services (customers with an existing Groq agreement)Some plans only
  • OpenAI API platformBAA on: API (enterprise / sales-managed accounts), API (pay-as-you-go / self-serve organizations), API FedRAMP (with Modified Retention)Signs a BAA

All BAA-ready alternatives to Fireworks AI

Sources

  1. Fireworks AI achieves SOC 2 Type II and HIPAA complianceFireworks AI, Announcement. Checked Oct 11, 2026.
  2. Privacy Policy | Fireworks AIFireworks AI, Legal terms. Checked Oct 11, 2026.

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.