Are Nabla's AI features covered by the BAA?

Ambient note generation: covered by the baa.

Does Nabla sign a BAA?

Q: Does Nabla sign a HIPAA BAA?

Yes, it signs a BAA. Nabla's US Terms of Service attach a Business Associate Agreement as Appendix I. It applies when the account holder is subject to HIPAA and will handle PHI, including accounts opened for oneself. Health organizations on contracts also get a standalone BAA.

Yes, it signs a BAA

Nabla's US Terms of Service attach a Business Associate Agreement as Appendix I. It applies when the account holder is subject to HIPAA and will handle PHI, including accounts opened for oneself. Health organizations on contracts also get a standalone BAA.

Based on 4 sources, all from Nabla unless marked.

Business associate: Nabla
Tool: Nabla
Plans with a BAA: Individual clinician accounts (self-serve sign-up, US); Health organizations (license contract)
Checked: Oct 11, 2026

Signs a BAA

Nabla signs a BAA for Nabla.

By plan

Plan	BAA	How to get it	Conditions
Individual clinician accounts (self-serve sign-up, US)	Signs a BAA	Included in the terms	Section 9 of the US Terms applies the Appendix I BAA from account creation when the user is a HIPAA covered entity or business associate and will use PHI. The wording covers accounts opened 'for yourself or your organization'. The precedence clauses conflict: the Terms say the Agreement prevails, while the BAA says the BAA prevails.[1]
Health organizations (license contract)	Signs a BAA	Through sales	Nabla publishes a standalone BAA that forms part of the client's license and maintenance contract. It is governed by French law and pre-authorizes Google as the hosting subcontractor.[2]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Nabla says about each one.

AI feature	Under the BAA	Details
Ambient note generation	Covered	The BAA covers PHI processed to provide the services. Nabla may use de-identified data to train its internal AI model and de-identified PHI for product improvement. Audio is not stored by default, and notes are kept for a configurable period (14 days by default). The trust center lists Google Cloud (hosting) and Azure (speech-to-text) and names no LLM provider.[1],[2],[3],[4]

Sources

Nabla Terms of Service (US)Nabla, Legal terms. Checked Oct 11, 2026.
Business Associate AgreementNabla, Legal terms. Checked Oct 11, 2026.
Nabla Trust CenterNabla, Trust center. Checked Oct 11, 2026.
HIPAA (Nabla Help Center)Nabla, Help center. Checked Oct 11, 2026.

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.