Is Supanote HIPAA compliant?

Supanote signs a Business Associate Agreement, which HIPAA requires before a vendor handles patient data for you. Once it's signed, you can use Supanote with patient data within the BAA's scope; whether your use is compliant still depends on your setup and your own policies.

Does Supanote sign a BAA?

Yes, it signs a BAA

Supanote is an AI note writer for therapists. Its help center says each account is automatically covered by its BAA, which is part of its terms, and users can download a customized BAA from the app; group practices get a custom BAA.

Based on 5 sources, all from Supanote unless marked.

Business associate
Supanote
Tool
Supanote
Plans with a BAA
Trial / Starter / Pro / XL (self-serve); Group Practice (sales-led)
Checked
Signs a BAA
Supanote signs a BAA.

By plan

PlanBAAHow to get itConditions
Trial / Starter / Pro / XL (self-serve)Signs a BAAIncluded in the termsRequest pageSupanote's help center (April 2026) says accounts are covered by its BAA as soon as they are created, with no separate paperwork, and that the BAA is part of its Terms of Use and Privacy Policy. Users download a customized BAA PDF from the profile menu in the app. The pricing page lists 'Consent forms and BAA' on Starter; the blog says the BAA comes at no extra cost.[2],[3],[1]
Group Practice (sales-led)Signs a BAAThrough salesThe pricing page lists a 'Custom BAA' for the Group Practice plan, which is quoted through a demo booking.[1]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Supanote says about each one.

AI featureUnder the BAADetails
AI therapy note generation (incl. treatment plans, AI client workspace)CoveredAI note writing is the core service the account BAA covers. Supanote says session audio is deleted after processing, it never trains AI models on identifiable client data, and vendors are contractually bound to its standards. No page names the AI model providers or says whether they sign BAAs.[2],[4],[5]

Compare Supanote

Sources

  1. PricingSupanote, Documentation. Checked Oct 13, 2026. Archived copy
  2. Business Associate Agreement (BAA)Supanote, Help center. Checked Oct 13, 2026. Archived copy
  3. How to Get a BAA From an AI Therapy Note VendorSupanote, Documentation. Checked Oct 13, 2026. Archived copy
  4. How does Supanote use my data?Supanote, Help center. Checked Oct 13, 2026. Archived copy
  5. HIPAA-Compliant AI Therapy Notes in MinutesSupanote, Documentation. Checked Oct 13, 2026. Archived copy

Change history

  1. Supanote — Trial / Starter / Pro / XL (self-serve): updated conditions (our correction after re-checking the vendor's pages).

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.