Does Upheal sign a BAA?

Yes, it signs a BAA

Upheal signs a BAA with every covered entity that uses the platform, free plan included. Users accept it electronically when they sign up, and for a group practice it covers every provider in the organization.

Based on 4 sources, all from Upheal, Inc. unless marked.

Business associate
Upheal, Inc.
Tool
Upheal
Plans with a BAA
Free / AI Notes / EHR / EHR Pro (solo, self-serve); Group practice (per-seat, via sales)
Checked
Signs a BAA
Upheal, Inc. signs a BAA for Upheal.

By plan

PlanBAAHow to get itConditions
Free / AI Notes / EHR / EHR Pro (solo, self-serve)Signs a BAAIncluded in the termsRequest pageThe compliance page says every covered entity on the platform accepts the BAA at signup. The BAA page says it takes effect when the user clicks an accept button. The BAA does not limit coverage by plan. A copy is linked from the help center and sent in the welcome email.[1],[2],[3],[4]
Group practice (per-seat, via sales)Signs a BAAIncluded in the termsRequest pageThe help center says that, for practice administrators, the BAA covers every provider in the organization. Group pricing is quoted through a 'Talk to us' sales contact. The same signup acceptance applies, and no separate group BAA process is described.[2],[4]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Upheal, Inc. says about each one.

AI featureUnder the BAADetails
AI progress notes (ambient, dictation, uploads)CoveredThe BAA covers the Upheal Platform and Services generally and has no AI carve-out. The compliance page says sessions are not used to train the platform without explicit permission. The BAA allows only de-identified, aggregated data to be used to improve the app.[1],[3]
Upheal Assistant / Assistant ProFree / AI Notes / EHR / EHR Pro (solo, self-serve)CoveredThe pricing page lists the AI Assistant across plans (limited on Free, a paid add-on or included on EHR Pro). It falls under the same platform-wide BAA, which does not name individual features.[1],[4]

Compare Upheal

Sources

  1. Business Associate AgreementUpheal, Inc., Legal terms. Checked Oct 11, 2026.
  2. Do you have a Business Associate Agreement (BAA)?Upheal, Inc., Help center. Checked Oct 11, 2026.
  3. HIPAA-Compliant Mental Health EHRUpheal, Inc., Trust center. Checked Oct 11, 2026.
  4. Upheal PricingUpheal, Inc., Documentation. Checked Oct 11, 2026.

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.