AI Vendor BAA Check

Does Together AI sign a BAA?

No BAA available

Together AI's Terms of Service bar customers from sending it medical information of any kind. We found no BAA offer, so its standard service should be treated as not accepting PHI.

Based on 2 sources, all from Together AI unless marked.

Business associate
Together AI
Tool
Together AI
Plans with a BAA
None
Checked
No BAA
Together AI won't sign a BAA.

By plan

PlanBAAHow to get itConditions
Standard (self-serve API) under the Terms of ServiceNo BAANot offeredSection 4.1 (Restrictions) bars sending financial or medical information, or other sensitive personal data, through the services. Terms updated May 19, 2026.[1]
Enterprise (negotiated agreement)Not confirmedNot statedWe found no official page saying whether a negotiated enterprise contract can include a BAA.[1],[2]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Together AI says about each one.

AI featureUnder the BAADetails
Serverless / dedicated inference and fine-tuningStandard (self-serve API) under the Terms of ServiceExcludedThe Terms ban on medical information covers all services.[1]

LLM APIs that offer a BAA

  • Claude API (Claude Platform)BAA on: First-party API (custom / negotiated BAA), First-party API (self-serve Console enablement)Some plans only
  • CohereBAA on: Custom model development engagementSome plans only
  • GroqCloudBAA on: GroqCloud paid, generally available services (customers with an existing Groq agreement)Some plans only
  • OpenAI API platformBAA on: API (enterprise / sales-managed accounts), API (pay-as-you-go / self-serve organizations), API FedRAMP (with Modified Retention)Signs a BAA

All BAA-ready alternatives to Together AI

Sources

  1. Terms of Service | Together AITogether AI, Legal terms. Checked Oct 11, 2026.
  2. Privacy Policy | Together AITogether AI, Legal terms. Checked Oct 11, 2026.

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.