Does Upheal sign a BAA?
Yes, it signs a BAA
Upheal signs a BAA with every covered entity that uses the platform, free plan included. Users accept it electronically when they sign up, and for a group practice it covers every provider in the organization.
- Business associate
- Upheal, Inc.
- Tool
- Upheal
- Plans with a BAA
- Free / AI Notes / EHR / EHR Pro (solo, self-serve); Group practice (per-seat, via sales)
- Checked
Signs a BAA
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Free / AI Notes / EHR / EHR Pro (solo, self-serve) | Signs a BAA | Included in the termsRequest page | The compliance page says every covered entity on the platform accepts the BAA at signup. The BAA page says it takes effect when the user clicks an accept button. The BAA does not limit coverage by plan. A copy is linked from the help center and sent in the welcome email.[1],[2],[3],[4] |
| Group practice (per-seat, via sales) | Signs a BAA | Included in the termsRequest page | The help center says that, for practice administrators, the BAA covers every provider in the organization. Group pricing is quoted through a 'Talk to us' sales contact. The same signup acceptance applies, and no separate group BAA process is described.[2],[4] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Upheal, Inc. says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| AI progress notes (ambient, dictation, uploads) | Covered | The BAA covers the Upheal Platform and Services generally and has no AI carve-out. The compliance page says sessions are not used to train the platform without explicit permission. The BAA allows only de-identified, aggregated data to be used to improve the app.[1],[3] |
| Upheal Assistant / Assistant ProFree / AI Notes / EHR / EHR Pro (solo, self-serve) | Covered | The pricing page lists the AI Assistant across plans (limited on Free, a paid add-on or included on EHR Pro). It falls under the same platform-wide BAA, which does not name individual features.[1],[4] |
Compare Upheal
- Upheal vs MentalycMentalyc: signs a BAA
- Blueprint vs UphealBlueprint: signs a BAA
Sources
- Business Associate Agreement
- Do you have a Business Associate Agreement (BAA)?
- HIPAA-Compliant Mental Health EHR
- Upheal Pricing
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.