Does LivePerson Conversational Cloud sign a BAA?
Only on some plans or setups
LivePerson's security page says it executes BAAs with HIPAA-covered entities. No LivePerson page says whether its generative AI or AI agent features fall under that BAA.
- Business associate
- LivePerson
- Tool
- LivePerson Conversational Cloud
- Plans with a BAA
- Conversational Cloud (enterprise contracts)
- Checked
Some plans only
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Conversational Cloud (enterprise contracts) | Signs a BAA | Through sales | The security page lists 'HIPAA via Business Associate Agreement (BAA)' and says LivePerson executes BAAs with HIPAA-covered entities. It does not name plans or a request process, so the path is assumed to go through the sales contract. Business associates (as opposed to covered entities) are not mentioned.[1],[2] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what LivePerson says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Generative AI / AI agents / healthcare chatbots | Not stated | The healthcare page promotes AI agents and chatbots and claims HIPAA-compliant handling of patient data at platform level. No page says the BAA covers generative AI features or LLM providers.[1],[3] |
Customer support AI that offer a BAA
- AdaBAA on: Enterprise contracts (Ada is sales-led)Some plans only
- Freshdesk / Freddy AIBAA on: Freshdesk, Freshchat (standalone), Freshcaller, Freshdesk OmnichannelSome plans only
- Intercom FinBAA on: Fin workspaces (Fin AI Agent standalone), Intercom ExpertSome plans only
- Jotform AI AgentsBAA on: Enterprise, GoldSome plans only
- Kustomer AIBAA on: Enterprise or Ultimate with HIPAA add-on packageSome plans only
- Salesforce Agentforce / EinsteinBAA on: Salesforce contracts with a signed BAA naming HIPAA Covered ServicesSome plans only
All BAA-ready alternatives to LivePerson Conversational Cloud
Sources
- Security | LivePerson
- Enterprise-Level Security with LivePerson
- Conversational AI in Healthcare | LivePerson
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.