Does Meta AI sign a BAA?

Not confirmed

Meta's official pages that could be reached say nothing about a BAA or HIPAA for the Meta AI assistant, so BAA availability is unconfirmed. Meta does advise users to be careful about sharing sensitive information with it.

Based on 2 sources, all from Meta unless marked.

Business associate
Meta
Tool
Meta AI
Plans with a BAA
Not stated
Checked
Not confirmed
No BAA offer found on Meta's own pages.

By plan

PlanBAAHow to get itConditions
Meta AI (consumer: Meta AI app, Facebook, Instagram, WhatsApp, Messenger)Not confirmedNot statedNo business or enterprise tier with a BAA is described on the official pages reviewed. Meta's help center advises care before sharing sensitive information with Meta AI, and its newsroom says chats may be retained, used and reviewed by people. Neither page addresses PHI or HIPAA directly.[1],[2]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Meta says about each one.

AI featureUnder the BAADetails
Meta AI chat assistantNot statedNo official statement on BAA coverage or PHI found.[1],[2]

AI chat assistants that offer a BAA

  • ChatGPTBAA on: ChatGPT FedRAMP, ChatGPT for Clinicians, ChatGPT for Healthcare, Edu, EnterpriseSome plans only
  • Claude apps (Claude.ai)BAA on: Enterprise (self-serve or sales-assisted)Some plans only
  • GrokBAA on: API (ZDR-enabled)Some plans only
  • PerplexityBAA on: API (Sonar), Enterprise Pro / Enterprise MaxSome plans only
  • BastionGPTBAA on: API, Professional, Professional Plus, Ultra (Enterprise)Signs a BAA
  • CompliantChatGPTBAA on: Enterprise, Starter / Pro / FullSigns a BAA

All BAA-ready alternatives to Meta AI

Sources

  1. About sharing with Meta AI on MessengerMeta, Help center. Checked Oct 11, 2026.
  2. Privacy Matters: Meta's Generative AI FeaturesMeta, Announcement. Checked Oct 11, 2026.

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.