Does Grammarly sign a BAA?
Only on some plans or setups
Grammarly signs BAAs only for Enterprise plans, through its sales team. It does not say whether its generative AI features are inside the BAA. For Superhuman Go, it excludes the Superhuman Mail agent and third-party agents.
Not fully covered by the BAA: Superhuman Go (AI assistant).
- Business associate
- Grammarly (Superhuman)
- Tool
- Grammarly
- Plans with a BAA
- Enterprise (Grammarly for Business Enterprise / Superhuman Enterprise)
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Free / Pro | No BAA | Not offered | Grammarly says it can enter BAAs only for Enterprise plans. Its business agreement bans HIPAA data unless a BAA covers the relevant Services.[1],[2] |
| Enterprise (Grammarly for Business Enterprise / Superhuman Enterprise) | Signs a BAA | Through sales | Contact Grammarly Sales. No minimum seat count is published. A signed BAA becomes part of the Customer Business Agreement by reference.[1],[2] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Grammarly (Superhuman) says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Grammarly generative AI features (rewrite, compose, agents)Enterprise (Grammarly for Business Enterprise / Superhuman Enterprise) | Not stated | Grammarly's HIPAA article does not say which features the BAA covers. Its privacy FAQ says LLM providers may not train on user content but does not address HIPAA coverage.[1],[3] |
| Superhuman Go (AI assistant)Enterprise (Grammarly for Business Enterprise / Superhuman Enterprise) | Partly covered | HIPAA-compliant Go is offered only on Superhuman Enterprise, within the BAA's scope. The Superhuman Mail agent and agents for third-party services are not covered. Customer-built agents are not listed as covered.[4] |
Writing assistants that offer a BAA
- Writer (writer.com)BAA on: EnterpriseSome plans only
All BAA-ready alternatives to Grammarly
Sources
- Is Grammarly HIPAA compliant?
- Customer Business Agreement
- Privacy and security FAQs
- Superhuman Go HIPAA Compliance Information
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.