Does Make.com sign a BAA?
Not confirmed
None of Make's official pages we could reach say whether it will sign a BAA. Its security page lists SOC 2, SOC 3, ISO 27001 and GDPR but does not mention HIPAA, so BAA availability is unknown.
- Business associate
- Make (Celonis)
- Tool
- Make.com
- Plans with a BAA
- Not stated
- Checked
Not confirmed
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| All plans (Free, Core, Pro, Teams, Enterprise) | Not confirmed | Not stated | The security page and the terms and conditions do not mention HIPAA, PHI or BAAs. In a February 2023 community post that appears to come from Make staff, Make said it was still gauging customer demand for HIPAA. There is no newer official statement.[1],[2],[3] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Make (Celonis) says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Make AI Agents / AI modules | Not stated | We found no official statement on HIPAA or BAA coverage for Make's AI features.[1] |
Workspace and collaboration AI that offer a BAA
- Adobe Acrobat AI AssistantBAA on: Acrobat Studio for enterprise: Analyzer in Acrobat, Acrobat Studio for enterprise: Knowledge Base in AcrobatSome plans only
- Airtable AIBAA on: Enterprise ScaleSome plans only
- Asana AIBAA on: AsanaGov, Enterprise+Some plans only
- Atlassian Rovo / Atlassian Intelligence (Confluence, Jira)BAA on: Enterprise, Standard / Premium (Jira, Jira Service Management, Jira Product Discovery, Confluence)Some plans only
- Box AIBAA on: Enterprise / Enterprise Plus / Enterprise AdvancedSome plans only
- ClickUp BrainBAA on: EnterpriseSome plans only
All BAA-ready alternatives to Make.com
Sources
- Security | Make
- Terms and conditions | Make
- Information Security Compliance (SOC2, ISO27001, HIPAA, etc.)
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.