Does JetBrains AI Assistant / Junie sign a BAA?
No BAA available
JetBrains' Acceptable Use Policy for its AI products asks users not to submit HIPAA protected health information, and no JetBrains page offers a BAA.
- Business associate
- JetBrains
- Tool
- JetBrains AI Assistant / Junie
- Plans with a BAA
- None
- Checked
No BAA
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| AI Free / AI Pro / AI Ultimate (cloud AI) | No BAA | Not offered | The AI Terms of Service (AI Assistant, Junie) are supplemented by the Acceptable Use Policy, whose AI section asks users to refrain from submitting PHI.[1],[2] |
| JetBrains AI Enterprise (cloud, on-premises or isolated) | Not confirmed | Not stated | JetBrains markets cloud, on-premises and isolated deployments and says it does not access data in isolated setups. No page addresses BAAs, and the PHI restriction in the AUP covers JetBrains-hosted and AI-provider-hosted models.[2],[3] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what JetBrains says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| AI Assistant chat, code completion and Junie coding agentAI Free / AI Pro / AI Ultimate (cloud AI) | Excluded | PHI should not be submitted under the AUP's AI-specific restrictions.[2] |
AI coding tools that offer a BAA
- Claude CodeBAA on: Claude Console API key (Commercial org) with zero data retention, Claude Enterprise (HIPAA-ready)Some plans only
- CursorBAA on: EnterpriseSome plans only
- OpenAI CodexBAA on: ChatGPT for Healthcare / ChatGPT for Clinicians / Enterprise or Edu with Regulated Workspace, OpenAI API (API key sign-in) with Modified RetentionSome plans only
All BAA-ready alternatives to JetBrains AI Assistant / Junie
Sources
- JetBrains AI Terms of Service (AI Assistant, Junie)
- JetBrains Products Acceptable Use Policy
- JetBrains AI
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.