Are Amp's AI features covered by the BAA?

Amp coding agent (CLI, editor extensions, threads): excluded from the baa.

Is Amp HIPAA compliant?

Q: Does Amp sign a HIPAA BAA?

No BAA available. Amp's terms say it is not a HIPAA business associate, that its services aren't built to hold protected health information, and that customers must not use them for it. No BAA is offered on any plan, Enterprise included.

Not for patient data. Amp Frontier Corporation doesn't sign a Business Associate Agreement for Amp, and HIPAA requires one before a vendor handles PHI for you.

Does Amp sign a BAA?

No BAA available

Amp's terms say it is not a HIPAA business associate, that its services aren't built to hold protected health information, and that customers must not use them for it. No BAA is offered on any plan, Enterprise included.

Based on 3 sources, all from Amp Frontier Corporation unless marked.

Business associate: Amp Frontier Corporation
Tool: Amp
Plans with a BAA: None
Checked: Oct 13, 2026

No BAA

Amp Frontier Corporation won't sign a BAA for Amp.

By plan

Plan	BAA	How to get it	Conditions
All plans (Free, Individual, Teams, Enterprise)	No BAA	Not offered	Section 2(c) of the terms defines HIPAA PHI as Sensitive Data, bars customers from using the services for it, and says Amp is not a Business Associate. The terms apply to Enterprise workspaces, and an order form overrides them only where it expressly conflicts.[1]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Amp Frontier Corporation says about each one.

AI feature	Under the BAA	Details
Amp coding agent (CLI, editor extensions, threads)	Excluded	PHI is prohibited across the service. Enterprise adds zero training and retention controls, which do not make it a business associate.[1],[2]

AI coding tools that offer a BAA

Augment CodeBAA on: EnterpriseSome plans only
Claude CodeBAA on: Claude Console API key (Commercial org) with zero data retention, Claude Enterprise (HIPAA-ready)Some plans only
CursorBAA on: EnterpriseSome plans only
Gemini Code AssistBAA on: Standard / Enterprise (Google Cloud)Some plans only
OpenAI CodexBAA on: ChatGPT for Healthcare / ChatGPT for Clinicians / Enterprise or Edu with Regulated Workspace, OpenAI API (API key sign-in) with Modified RetentionSome plans only

All BAA-ready alternatives to Amp

Sources

Amp Terms of ServiceAmp Frontier Corporation, Legal terms. Checked Oct 13, 2026. Archived copy
Amp Security ReferenceAmp Frontier Corporation, Trust center. Checked Oct 13, 2026. Archived copy
Amp, Inc.Amp Frontier Corporation, Announcement. Checked Oct 13, 2026. Archived copy

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.