AI Vendor BAA Check

Does Pi sign a BAA?

Not confirmed

Inflection's Terms of Service and Privacy Policy for Pi do not mention HIPAA or BAAs, and the site has no security or trust page. BAA availability is unknown.

Based on 2 sources, all from Inflection AI unless marked.

Business associate
Inflection AI
Tool
Pi
Plans with a BAA
Not stated
Checked
Not confirmed
No BAA offer found on Inflection AI's own pages.

By plan

PlanBAAHow to get itConditions
Pi (consumer)Not confirmedNot statedThe Terms (updated December 22, 2025) say Pi is not a substitute for medical advice but do not mention HIPAA, health data or BAAs. The Privacy Policy (updated August 11, 2026) is also silent on HIPAA.[1],[2]
Inflection enterprise / APINot confirmedNot statedThe Privacy Policy says commercial API processing falls under a separate agreement, which is not published. No BAA terms were found.[2]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Inflection AI says about each one.

AI featureUnder the BAADetails
Pi conversational assistantPi (consumer)Not statedWe found no official statement on HIPAA coverage.[1],[2]

AI chat assistants that offer a BAA

  • ChatGPTBAA on: ChatGPT FedRAMP, ChatGPT for Clinicians, ChatGPT for Healthcare, Edu, EnterpriseSome plans only
  • Claude apps (Claude.ai)BAA on: Enterprise (self-serve or sales-assisted)Some plans only
  • GrokBAA on: API (ZDR-enabled)Some plans only
  • PerplexityBAA on: API (Sonar), Enterprise Pro / Enterprise MaxSome plans only
  • BastionGPTBAA on: API, Professional, Professional Plus, Ultra (Enterprise)Signs a BAA
  • CompliantChatGPTBAA on: Enterprise, Starter / Pro / FullSigns a BAA

All BAA-ready alternatives to Pi

Sources

  1. Terms of Service | Inflection AIInflection AI, Legal terms. Checked Oct 11, 2026.
  2. Privacy Policy | Inflection AIInflection AI, Legal terms. Checked Oct 11, 2026.

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.