Does Jotform AI Agents sign a BAA?
Only on some plans or setups
Jotform signs a BAA for covered-entity customers on Gold or Enterprise plans who turn on HIPAA features, and the signing is done in the account. Jotform says its AI Agents are HIPAA-enabled for those accounts and run on model providers that have BAAs with Jotform.
- Business associate
- Jotform
- Tool
- Jotform AI Agents
- Plans with a BAA
- Gold; Enterprise
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Gold | Signs a BAA | Accept or sign onlineRequest page | Turn on HIPAA compliance features, then sign the BAA from the Data page of the account (the 'Sign BAA' option). The signed copy is emailed. Jotform says HIPAA features cost nothing extra on Gold. The BAA is offered to US-based covered-entity customers.[1],[2],[3],[4] |
| Enterprise | Signs a BAA | Accept or sign online | Jotform's HIPAA pricing page and HIPAA overview list HIPAA features as part of Enterprise. The HIPAA FAQ also contains a line saying HIPAA is Gold-only, which conflicts with this.[1],[3],[4] |
| Starter (Free) / Bronze / Silver | No BAA | Not offered | The HIPAA pricing page says Starter excludes HIPAA features. Bronze and Silver are not listed as HIPAA-eligible.[4] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Jotform says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Jotform AI Agents (HIPAA-enabled accounts)Gold, Enterprise | Covered | Jotform says AI Agents are HIPAA-enabled for HIPAA accounts, and that it has BAAs with OpenAI and Google. The HIPAA pricing page names Gemini on Vertex AI for HIPAA accounts, while the AI Agents security page names OpenAI. The BAA documents we reviewed do not name AI Agents as a covered service.[4],[5] |
Customer support AI that offer a BAA
- AdaBAA on: Enterprise contracts (Ada is sales-led)Some plans only
- Freshdesk / Freddy AIBAA on: Freshdesk, Freshchat (standalone), Freshcaller, Freshdesk OmnichannelSome plans only
- Intercom FinBAA on: Fin workspaces (Fin AI Agent standalone), Intercom ExpertSome plans only
- Kustomer AIBAA on: Enterprise or Ultimate with HIPAA add-on packageSome plans only
- LivePerson Conversational CloudBAA on: Conversational Cloud (enterprise contracts)Some plans only
- Salesforce Agentforce / EinsteinBAA on: Salesforce contracts with a signed BAA naming HIPAA Covered ServicesSome plans only
All BAA-ready alternatives to Jotform AI Agents
Sources
- HIPAA Compliant Forms | Jotform
- How to Receive the BAA for Your HIPAA Account
- HIPAA FAQ | Jotform
- HIPAA Pricing | Jotform
- Jotform Secure AI Agents
- Business Associate Agreement | Jotform
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.