Does monday.com AI sign a BAA?
Only on some plans or setups
monday.com signs a BAA only on its Enterprise plan, accepted by an admin in Administration > Security > Compliance. monday.com's AI FAQ says monday AI can be used with PHI by healthcare customers who have signed the BAA.
- Business associate
- monday.com
- Tool
- monday.com AI
- Plans with a BAA
- Enterprise
- Checked
Some plans only
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Free / Basic / Standard / Pro | No BAA | Not offered | HIPAA is offered on the Enterprise plan only. Accounts that downgrade lose HIPAA coverage.[1] |
| Enterprise | Signs a BAA | Accept or sign online | An admin opens Administration > Security > Compliance, reviews and accepts the BAA, then clicks Activate HIPAA Compliance. Broadcast is disabled. Recommended: email-update redaction, SSO, access reviews and the audit log. The mobile app is covered from specific versions. Third-party integrations are not part of the covered services.[1] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what monday.com says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| monday AIEnterprise | Covered | monday.com says its AI can be used with PHI by healthcare customers who have signed a BAA. Its model providers (Anthropic, OpenAI, Google, NVIDIA via various hosts) are under zero-data-retention commitments.[2] |
| AI models with optional 30-day input/output retentionEnterprise | Not stated | Some models may keep inputs and outputs for 30 days if an admin enables it. monday.com does not say how this interacts with HIPAA accounts.[2] |
Workspace and collaboration AI that offer a BAA
- Adobe Acrobat AI AssistantBAA on: Acrobat Studio for enterprise: Analyzer in Acrobat, Acrobat Studio for enterprise: Knowledge Base in AcrobatSome plans only
- Airtable AIBAA on: Enterprise ScaleSome plans only
- Asana AIBAA on: AsanaGov, Enterprise+Some plans only
- Atlassian Rovo / Atlassian Intelligence (Confluence, Jira)BAA on: Enterprise, Standard / Premium (Jira, Jira Service Management, Jira Product Discovery, Confluence)Some plans only
- Box AIBAA on: Enterprise / Enterprise Plus / Enterprise AdvancedSome plans only
- ClickUp BrainBAA on: EnterpriseSome plans only
All BAA-ready alternatives to monday.com AI
Compare monday.com AI
- Asana AI vs monday.com AIAsana AI: some plans
Sources
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.