Is Phrase HIPAA compliant?
Not confirmed. We couldn't find a Business Associate Agreement offer on Phrase's own pages. Without a signed BAA, keep patient data out of it.
Does Phrase sign a BAA?
Not confirmed
Phrase says it does not knowingly process customers' protected health information, and it asks covered entities or business associates to contact its privacy team before processing any. It does not say it signs a BAA. BAA availability is unknown.
- Business associate
- Phrase
- Tool
- Phrase
- Plans with a BAA
- Not stated
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| All Phrase plans (TMS, Strings, Language AI) | Not confirmed | Not statedprivacy@phrase.com | Phrase's security page says it does not knowingly process PHI and asks covered entities or business associates to email privacy@phrase.com before processing PHI. It never says a BAA is available or refused. It cites a third-party CyberGRX assessment for its HIPAA claims.[1] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Phrase says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Phrase NextMT, Next GenMT and AI Translation Agent | Not stated | Phrase says customer content is not used to train NextMT. Next GenMT and other LLM features call OpenAI, Google, Microsoft and Anthropic under enterprise terms with no storage or training. No BAA coverage is documented.[1],[2] |
| Custom AI engines and quality scoring (QPS, CustomAI) | Not stated | These features are trained on customer content, and custom engines are private to the customer. No BAA coverage is documented.[2] |
| Third-party MT engines connected with your own API key | Not stated | Phrase says it has no control over how third-party MT engines connected with a customer's own key handle training. Any BAA would need to be with that engine's provider.[2] |
Translation AI that offer a BAA
- Amazon TranslateBAA on: AWS accounts (Sign up for AWS, advanced)Some plans only
- Azure AI TranslatorBAA on: Azure commercial customersSigns a BAA
- Google Cloud TranslationBAA on: Google Cloud customers (with a Services Agreement)Signs a BAA
All BAA-ready alternatives to Phrase
Sources
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.