AI Vendor BAA Check

Does v0 by Vercel sign a BAA?

No BAA available

Vercel signs BAAs for its hosting platform (a paid add-on on Pro, or through sales on Enterprise), but its API Terms bar using the v0 API or v0 product to process PHI. v0 Enterprise lists HIPAA among inherited compliance, but no page says a BAA covers v0's AI.

Based on 6 sources, all from Vercel unless marked.

Business associate
Vercel
Tool
v0 by Vercel
Plans with a BAA
Vercel platform hosting (Pro HIPAA add-on / Enterprise)
Checked
No BAA
Vercel won't sign a BAA for v0 by Vercel.

By plan

PlanBAAHow to get itConditions
v0 Free / Premium / Team / Business (and v0 API)No BAANot offeredVercel's API Terms prohibit using the v0 API or AI Solution (defined as v0 when not otherwise defined) to process PHI.[1]
v0 EnterpriseNot confirmedThrough salesRequest pageThe Enterprise page lists 'Compliance inheritance (SOC 2, ISO, GDPR, HIPAA)' but does not mention a BAA for v0's AI generation. Vercel's Terms of Service also bar hosting PHI without Vercel's prior written approval.[2],[3]
Vercel platform hosting (Pro HIPAA add-on / Enterprise)Signs a BAAAccept or sign onlineRequest pageThis covers apps deployed on Vercel, not v0 itself. Pro teams buy the HIPAA BAA add-on ($350/month) in Billing settings, and Enterprise teams request a BAA through sales. The covered services in the HIPAA guide do not include v0.[4],[5],[6]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Vercel says about each one.

AI featureUnder the BAADetails
v0 AI app/UI generation and v0 APIv0 Free / Premium / Team / Business (and v0 API)ExcludedPHI is prohibited under the API Terms.[1]
Apps generated by v0 and deployed on Vercel hostingVercel platform hosting (Pro HIPAA add-on / Enterprise)Partly coveredHosting infrastructure such as the CDN, Functions and the build pipeline is covered under the Vercel BAA. The v0 generation step is not.[5],[6]

AI coding tools that offer a BAA

  • Claude CodeBAA on: Claude Console API key (Commercial org) with zero data retention, Claude Enterprise (HIPAA-ready)Some plans only
  • CursorBAA on: EnterpriseSome plans only
  • OpenAI CodexBAA on: ChatGPT for Healthcare / ChatGPT for Clinicians / Enterprise or Edu with Regulated Workspace, OpenAI API (API key sign-in) with Modified RetentionSome plans only

All BAA-ready alternatives to v0 by Vercel

Sources

  1. API TermsVercel, Legal terms. Checked Oct 11, 2026.
  2. v0 Enterprise - v0.appVercel, Documentation. Checked Oct 11, 2026.
  3. Terms of ServiceVercel, Legal terms. Checked Oct 11, 2026.
  4. Vercel Pro PlanVercel, Documentation. Checked Oct 11, 2026.
  5. Security & Compliance MeasuresVercel, Documentation. Checked Oct 11, 2026.
  6. How to build and maintain HIPAA-compliant applications on VercelVercel, Documentation. Checked Oct 11, 2026.

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.