Does Perplexity sign a BAA?
Only on some plans or setups
Perplexity's Enterprise and API terms ban PHI unless the customer and Perplexity have signed a BAA, which implies a BAA can be negotiated. Perplexity publishes no BAA process or covered-feature list. The consumer terms never mention HIPAA, and Perplexity says HIPAA does not apply to its consumer health product.
Not fully covered by the BAA: Perplexity Health (consumer health features and medical records connector).
- Business associate
- Perplexity AI
- Tool
- Perplexity
- Plans with a BAA
- Enterprise Pro / Enterprise Max; API (Sonar)
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Free / Pro / Max (consumer) | Not confirmed | Not stated | The consumer Terms do not mention HIPAA, PHI, or a BAA. Perplexity says HIPAA does not apply to consumer health products such as Perplexity Health.[1],[2] |
| Enterprise Pro / Enterprise Max | Conditions apply | Not stated | Enterprise Terms section 5.2 bans PHI unless the parties have executed a BAA. Perplexity does not say how to request one or which features it would cover. Comet for Enterprise is under separate terms that were not reviewed.[3],[4] |
| API (Sonar) | Conditions apply | Not stated | API Terms section 6.2 has the same PHI ban unless a BAA is executed. API docs describe zero data retention for the Chat Completions API and list a 2025 HIPAA Gap Assessment.[5],[6] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Perplexity AI says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Perplexity search/answer engine, Enterprise features (Comet, connectors, agents)Enterprise Pro / Enterprise Max | Not stated | Perplexity publishes no BAA scope, so it is unclear which Enterprise features a negotiated BAA would cover.[3] |
| Perplexity Health (consumer health features and medical records connector)Free / Pro / Max (consumer) | Excluded | Perplexity says HIPAA does not apply to this consumer wellness product. It describes 'HIPAA-aligned safeguards', which is not a claim of BAA coverage.[2] |
AI chat assistants that offer a BAA
- ChatGPTBAA on: ChatGPT FedRAMP, ChatGPT for Clinicians, ChatGPT for Healthcare, Edu, EnterpriseSome plans only
- Claude apps (Claude.ai)BAA on: Enterprise (self-serve or sales-assisted)Some plans only
- GrokBAA on: API (ZDR-enabled)Some plans only
- BastionGPTBAA on: API, Professional, Professional Plus, Ultra (Enterprise)Signs a BAA
- CompliantChatGPTBAA on: Enterprise, Starter / Pro / FullSigns a BAA
- Hathr AIBAA on: API (Base / Starter / Scale), Enterprise, Single Subscription WebappSigns a BAA
All BAA-ready alternatives to Perplexity
Sources
- Perplexity Terms of Service
- What is Perplexity Health?
- Perplexity Enterprise Terms of Service
- What is Enterprise Pro?
- Perplexity API Terms of Service
- Privacy & Security - Perplexity API docs
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.