AI Vendor BAA CheckCheck your tool list

Is Formstack AI HIPAA compliant?

Only on the right plan. Formstack signs a Business Associate Agreement with its customers on HIPAA-enabled account (Formstack for Healthcare plan, Enterprise, or Forms/Suite with HIPAA add-on). Other plans aren't covered, so keep patient data out of them. Formstack doesn't say whether the BAA covers its AI features.

Does Formstack AI sign a BAA?

Only on some plans or setups

Formstack offers a standard BAA for HIPAA-enabled accounts, which it sets up through sales (Formstack for Healthcare plan, Enterprise, or a HIPAA add-on). Its AI form-building feature runs on Anthropic's Claude via AWS Bedrock, but Formstack does not say whether its AI features are covered by the BAA.

Based on 5 sources, all from Formstack unless marked.

Not confirmed for the AI features: Formstack doesn’t say whether its BAA covers AI form creation (Create with AI); AI-powered document generation (Formstack Documents). Get that in writing before using them with patient data.

Business associate
Formstack
Tool
Formstack AI
Plans with a BAA
HIPAA-enabled account (Formstack for Healthcare plan, Enterprise, or Forms/Suite with HIPAA add-on)
Checked
Some plans only
Formstack signs only for the plans listed; AI coverage isn't stated.

By plan

PlanBAAHow to get itConditions
HIPAA-enabled account (Formstack for Healthcare plan, Enterprise, or Forms/Suite with HIPAA add-on)Signs a BAAThrough salesRequest pageFormstack offers its Standard BAA and will review custom BAA requests. Sales creates a special HIPAA account or converts an existing one. The pricing page shows HIPAA compliance included on Enterprise and as a paid add-on for Forms and Suite. Help articles say healthcare customers handling ePHI should use the Formstack for Healthcare plan.[1],[2],[3]
Forms / Suite without the HIPAA add-onNot confirmedNot statedFormstack ties the BAA to a HIPAA-enabled account but does not explicitly say it refuses a BAA on standard accounts.[1],[3]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Formstack says about each one.

AI featureUnder the BAADetails
AI form creation (Create with AI)HIPAA-enabled account (Formstack for Healthcare plan, Enterprise, or Forms/Suite with HIPAA add-on)Not statedAn Org Admin must enable it. It sends the prompt and form name to Anthropic's Claude in Formstack's AWS Bedrock environment, and Formstack says it does not train AI on forms you create. No page says whether it is available on, or covered for, HIPAA accounts. Do not put PHI in prompts.[4]
AI-powered document generation (Formstack Documents)HIPAA-enabled account (Formstack for Healthcare plan, Enterprise, or Forms/Suite with HIPAA add-on)Not statedMarketed as AI-powered; no official page addresses HIPAA or BAA coverage for it.[5]

Workspace and collaboration AI that offer a BAA

All BAA-ready alternatives to Formstack AI

Sources

  1. HIPAA-friendly formsFormstack, Documentation. Checked Oct 13, 2026. Archived copy
  2. Setting up Emails and Actions with a Formstack for Healthcare planFormstack, Help center. Checked Oct 13, 2026. Archived copy
  3. Formstack pricingFormstack, Documentation. Checked Oct 13, 2026. Archived copy
  4. AI Form Creation with Formstack FormsFormstack, Help center. Checked Oct 13, 2026. Archived copy
  5. Accelerate form building with AIFormstack, Documentation. Checked Oct 13, 2026. Archived copy

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.