Is Smartling HIPAA compliant?
Not confirmed. We couldn't find a Business Associate Agreement offer on Smartling's own pages. Without a signed BAA, keep patient data out of it.
Does Smartling sign a BAA?
Not confirmed
Smartling says it has kept HIPAA compliance since 2013 and holds HITRUST e1 certification, but none of its public pages say it signs a BAA. Its master agreement leaves PHI terms to separate addenda that are not published. BAA availability is unknown.
- Business associate
- Smartling
- Tool
- Smartling
- Plans with a BAA
- Not stated
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Smartling platform and services (enterprise contracts) | Not confirmed | Not stated | The security page claims HIPAA compliance since 2013, plus HITRUST e1 for its translation management system on AWS. The current MSA treats PHI as confidential information and says the terms may be defined in addenda, but no BAA or PHI addendum is published. The security page also says Smartling works to keep personal data out of its platform.[1],[2],[3] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Smartling says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| AI Hub (LLM and machine translation engines) | Not stated | Smartling says AI Hub translates with 20+ LLMs and MT engines, and it holds ISO 42001 for AI management. No page says whether these engines, or the third parties behind them, are under any BAA.[1] |
| Human translation services (contract linguists) | Not stated | Smartling uses independent contractors and does not let customers control their assignments. BAA coverage is not documented.[1] |
Translation AI that offer a BAA
- Amazon TranslateBAA on: AWS accounts (Sign up for AWS, advanced)Some plans only
- Azure AI TranslatorBAA on: Azure commercial customersSigns a BAA
- Google Cloud TranslationBAA on: Google Cloud customers (with a Services Agreement)Signs a BAA
All BAA-ready alternatives to Smartling
Sources
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.