Does Scribeberry sign a BAA?

Yes, it signs a BAA

Scribeberry signs a BAA with every user. A HIPAA Business Associate Agreement is built into its Terms and takes effect on the sign-up date, and the homepage shows a 'BAA Available' badge.

Based on 4 sources, all from ScribeBerry Ltd. unless marked.

Business associate
ScribeBerry Ltd.
Tool
Scribeberry
Plans with a BAA
Trial / Pro (self-serve); Enterprise (5+ providers)
Checked
Signs a BAA
ScribeBerry Ltd. signs a BAA for Scribeberry.

By plan

PlanBAAHow to get itConditions
Trial / Pro (self-serve)Signs a BAAIncluded in the termsRequest pageThe Terms (updated 2025-04-02) include a HIPAA BAA section that takes effect on the sign-up date, with no separate signing step. The pricing page does not mention the BAA but lists HIPAA and PIPEDA on all plans. Pro is $99/month.[1],[2],[3]
Enterprise (5+ providers)Minimum 5 seatsSigns a BAAIncluded in the termsRequest pageEnterprise is $79 per user per month for 5 or more providers. The same BAA in the Terms applies, and no separate enterprise BAA process is described.[1],[2]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what ScribeBerry Ltd. says about each one.

AI featureUnder the BAADetails
AI medical scribe / note generation (incl. ADA assistant)CoveredThe BAA in the Terms says Scribeberry will not access PHI or train on input PHI. The Terms and security page list BAAs with downstream vendors (Microsoft Azure, Google, OpenAI, Anthropic and Vapi AI) with zero retention. Transcription runs on a self-hosted service.[1],[4]

Sources

  1. Terms (incl. HIPAA Business Associate Agreement)ScribeBerry Ltd., Legal terms. Checked Oct 11, 2026.
  2. PricingScribeBerry Ltd., Documentation. Checked Oct 11, 2026.
  3. AI Medical Scribe — HIPAA & PIPEDAScribeBerry Ltd., Documentation. Checked Oct 11, 2026.
  4. Privacy & SecurityScribeBerry Ltd., Trust center. Checked Oct 11, 2026.

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.