Is Microsoft Teams HIPAA compliant?
Microsoft signs a Business Associate Agreement (BAA) for Microsoft Teams only on Microsoft 365 / Office 365 commercial (business, enterprise and education plans with Teams) and Office 365 GCC, but it doesn't say whether the BAA covers all of its AI features. Other plans aren't covered, so keep patient data out of them.
Does Microsoft Teams sign a BAA?
Only on some plans or setups
Microsoft's HIPAA BAA covers Microsoft Teams by default for commercial and GCC customers that are covered entities or business associates, through its Data Protection Addendum. The free version of Teams for personal use has no BAA route that Microsoft documents. Copilot in Teams falls under the Microsoft Copilot listing; Teams Premium intelligent recap isn't named.
Not confirmed for the AI features: Microsoft doesn’t say whether its BAA covers Intelligent recap (Teams Premium add-on). Get that in writing before using it with patient data.
- Business associate
- Microsoft
- Tool
- Microsoft Teams
- Plans with a BAA
- Microsoft 365 / Office 365 commercial (business, enterprise and education plans with Teams); Office 365 GCC
- Checked
By plan
| Plan | BAA available | AI features covered | How to get it | Notes |
|---|---|---|---|---|
| Microsoft 365 / Office 365 commercial (business, enterprise and education plans with Teams) | Signs a BAA | 1 covered, 1 not confirmed | Included in the terms | The BAA comes by default through the Microsoft Online Services DPA for customers that are covered entities or business associates; nothing to sign separately. Microsoft Teams is in the Office 365 Commercial in-scope list. Only in-scope services are covered, and you still configure Teams (retention, external access, guest access, recording) for your own HIPAA program.[1] |
| Office 365 GCC | Signs a BAA | 1 covered | Included in the terms | Microsoft Teams is in the GCC in-scope list. The HIPAA page gives no in-scope table for GCC High or DoD.[1] |
| Free Teams for personal use (Teams for home) and Microsoft 365 Personal / Family | Unconfirmed | None listed | Not stated | Microsoft describes the free version of Teams as being for personal use with friends, family and contacts. Its BAA is offered for enterprise products and services through the commercial DPA, and we found no BAA route for personal Microsoft accounts. Treat these as not covered.[1],[2] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Microsoft says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Copilot in Teams meetings, chats and calls (Microsoft 365 Copilot license)Microsoft 365 / Office 365 commercial (business, enterprise and education plans with Teams), Office 365 GCC | Covered | The in-scope lists for Commercial and GCC name Microsoft Copilot and Microsoft Copilot Chat. Copilot in Teams needs a Microsoft 365 Copilot license and works from the meeting transcript. Web search grounding is outside the BAA (see Microsoft 365 Copilot).[1],[3] |
| Intelligent recap (Teams Premium add-on)Microsoft 365 / Office 365 commercial (business, enterprise and education plans with Teams) | Not stated | Microsoft says intelligent recap inherits the organization's Teams security, compliance and privacy policies and isn't used for model training. The HIPAA page doesn't name Teams Premium or intelligent recap, so BAA coverage of the recap itself isn't confirmed.[1],[4] |
What the BAA doesn’t cover
- Free Teams for personal use (Teams for home) and Microsoft 365 Personal / Family: no BAA confirmed. Keep patient data out.
- Intelligent recap (Teams Premium add-on): coverage not confirmed (Microsoft 365 / Office 365 commercial (business, enterprise and education plans with Teams)).
Integrations and third-party apps you connect usually need their own BAA. Check each one before it touches patient data.
Which Copilot?
The answer depends on the product and the account you sign in with.
- Microsoft 365 CopilotMicrosoft 365 Copilot and Copilot Chat, signed in with a work or school accountSigns a BAA
- Microsoft CopilotThe Copilot app with a personal Microsoft accountNot confirmed
- Microsoft TeamsCopilot in Teams meetings and chatsSome plans only
- Microsoft Copilot StudioBuilding your own agents in Copilot StudioSigns a BAA
- Microsoft Dragon CopilotClinical documentation, formerly sold as Nuance DAX CopilotSigns a BAA
- GitHub CopilotAI coding assistant from GitHubNo BAA
Teams and its AI
The answer depends on the product and the account you sign in with.
- Microsoft TeamsTeams chat, meetings and callsSome plans only
- Microsoft Teams Premium intelligent recapIntelligent recap (Teams Premium add-on)Not confirmed
- Microsoft 365 CopilotCopilot across Microsoft 365, including TeamsSigns a BAA
Productivity suite AI that offer a BAA
- Google Workspace (incl. Gemini)BAA on: Google Workspace (editions that include Gemini), BAA accepted by adminSigns a BAA
- Microsoft 365 CopilotBAA on: Microsoft 365 commercial (Microsoft 365 Copilot license), Microsoft 365 Copilot Chat (free with eligible work/school Entra accounts), Office 365 GCCSigns a BAA
All BAA-ready alternatives to Microsoft Teams
FAQ
Is Microsoft Teams HIPAA compliant?
Microsoft signs a Business Associate Agreement (BAA) for Microsoft Teams only on Microsoft 365 / Office 365 commercial (business, enterprise and education plans with Teams) and Office 365 GCC, but it doesn't say whether the BAA covers all of its AI features. Other plans aren't covered, so keep patient data out of them. A signed BAA is required but isn't enough on its own: HIPAA compliance also depends on how you set up and use Microsoft Teams.
Does Microsoft sign a BAA for Microsoft Teams?
Only on some plans or setups. Microsoft's HIPAA BAA covers Microsoft Teams by default for commercial and GCC customers that are covered entities or business associates, through its Data Protection Addendum. The free version of Teams for personal use has no BAA route that Microsoft documents. Copilot in Teams falls under the Microsoft Copilot listing; Teams Premium intelligent recap isn't named.
Are Microsoft Teams' AI features covered by the BAA?
Copilot in Teams meetings, chats and calls (Microsoft 365 Copilot license): covered by the baa. Intelligent recap (Teams Premium add-on): coverage not stated.
Is Copilot HIPAA compliant?
Microsoft 365 Copilot: a BAA on all the plans we list. Microsoft Copilot: no BAA confirmed on the vendor's own pages. Microsoft Teams: a BAA only on Microsoft 365 / Office 365 commercial, Office 365 GCC. Microsoft Copilot Studio: a BAA on all the plans we list. Microsoft Dragon Copilot: a BAA on all the plans we list. GitHub Copilot: no BAA.
Is Microsoft Teams AI covered by the BAA?
Microsoft Teams: a BAA only on Microsoft 365 / Office 365 commercial, Office 365 GCC. Microsoft Teams Premium intelligent recap: no BAA confirmed on the vendor's own pages. Microsoft 365 Copilot: a BAA on all the plans we list.
When did we last check Microsoft Teams?
We last verified Microsoft Teams against Microsoft's own pages on Oct 14, 2026. Each listing is re-checked on a schedule, and a daily monitor flags changes to the vendor pages it cites.
Sources
- HIPAA and the HITECH Act - Microsoft Compliance
- Free Microsoft Teams
- Manage Microsoft Copilot for Teams meetings and events
- Intelligent recap privacy and data handling
Cite this
AI Vendor BAA Check. (n.d.). Is Microsoft Teams HIPAA compliant? BAA status by plan. Retrieved October 14, 2026, from https://aivendorbaacheck.com/tools/microsoft-teams
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.