Are Retool AI's AI features covered by the BAA?

Retool AI (AI app builder, Agents, AI actions): excluded from the baa.

Does Retool AI sign a BAA?

Q: Does Retool AI sign a HIPAA BAA?

No BAA available. Retool's terms say it is not a business associate and that customers should not submit PHI to its cloud services. Retool does not sign a BAA, and that includes its AI features.

No BAA available

Retool's terms say it is not a business associate and that customers should not submit PHI to its cloud services. Retool does not sign a BAA, and that includes its AI features.

Based on 2 sources, all from Retool unless marked.

Business associate: Retool
Tool: Retool AI
Plans with a BAA: None
Checked: Oct 11, 2026

No BAA

Retool won't sign a BAA for Retool AI.

By plan

Plan	BAA	How to get it	Conditions
Retool Cloud (all plans)	No BAA	Not offered	The Customer-Specific Supplement says Retool is not a Business Associate or subcontractor. It tells customers not to submit, collect or use PHI in cloud-based versions, and says Retool cannot support PHI and is not liable for it.[1]
Self-hosted Retool	No BAA	Not offered	The not-a-business-associate clause is general, and it puts HIPAA compliance solely on the customer. The PHI ban is written for cloud versions only, so self-hosting may let PHI stay on customer infrastructure. Even so, Retool does not act as a business associate.[1]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Retool says about each one.

AI feature	Under the BAA	Details
Retool AI (AI app builder, Agents, AI actions)	Excluded	No BAA exists for any Retool service. The supplement does not discuss AI features separately.[1]

AI coding tools that offer a BAA

Claude CodeBAA on: Claude Console API key (Commercial org) with zero data retention, Claude Enterprise (HIPAA-ready)Some plans only
CursorBAA on: EnterpriseSome plans only
OpenAI CodexBAA on: ChatGPT for Healthcare / ChatGPT for Clinicians / Enterprise or Edu with Regulated Workspace, OpenAI API (API key sign-in) with Modified RetentionSome plans only

All BAA-ready alternatives to Retool AI

Sources

Customer-Specific Supplement | Retool DocsRetool, Legal terms. Checked Oct 11, 2026.
Is Retool HIPAA compliant?Paubox, Third party. Checked Oct 11, 2026.

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.