Is Warp HIPAA compliant?

Not for patient data. Warp doesn't sign a Business Associate Agreement, and HIPAA requires one before a vendor handles PHI for you.

Does Warp sign a BAA?

No BAA available

Warp publishes no BAA. Its terms bar customers from uploading personal information other than login credentials unless Warp agrees otherwise in writing, which rules out PHI under standard terms.

Based on 3 sources, all from Warp unless marked.

Business associate
Warp
Tool
Warp
Plans with a BAA
None
Checked
No BAA
Warp won't sign a BAA.

By plan

PlanBAAHow to get itConditions
All plans (Free, paid, Business, Enterprise)No BAANot offeredSection 5.4 of Warp's terms bars uploading personal information other than user login credentials unless agreed in writing. No Warp page mentions HIPAA or a BAA. Only a separately negotiated written agreement could change this, and Warp publishes no such route.[1],[2],[3]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Warp says about each one.

AI featureUnder the BAADetails
Warp AI agents and terminal AIExcludedAI requests go through Warp's proxy to US-hosted model APIs under zero-data-retention agreements. That doesn't amount to a BAA, and the terms still bar uploading personal information.[1],[2],[3]

AI coding tools that offer a BAA

  • Augment CodeBAA on: EnterpriseSome plans only
  • Claude CodeBAA on: Claude Console API key (Commercial org) with zero data retention, Claude Enterprise (HIPAA-ready)Some plans only
  • CursorBAA on: EnterpriseSome plans only
  • Gemini Code AssistBAA on: Standard / Enterprise (Google Cloud)Some plans only
  • OpenAI CodexBAA on: ChatGPT for Healthcare / ChatGPT for Clinicians / Enterprise or Edu with Regulated Workspace, OpenAI API (API key sign-in) with Modified RetentionSome plans only

All BAA-ready alternatives to Warp

Sources

  1. Terms of Service | WarpWarp, Legal terms. Checked Oct 13, 2026. Archived copy
  2. Security overview (Warp Enterprise docs)Warp, Documentation. Checked Oct 13, 2026. Archived copy
  3. Secure by DesignWarp, Trust center. Checked Oct 13, 2026. Archived copy

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.