Does Zapier (incl. Zapier AI / Agents) sign a BAA?
No BAA available
Zapier says it cannot sign BAAs and does not support using PHI under HIPAA on its platform. That applies to the whole service, AI features included.
- Business associate
- Zapier
- Tool
- Zapier (incl. Zapier AI / Agents)
- Plans with a BAA
- None
- Checked
No BAA
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| All plans (Free, Pro, Team, Enterprise) | No BAA | Not offered | Zapier's Data Privacy FAQ says using regulated healthcare data, including PHI under HIPAA, is not supported, and that Zapier cannot sign BAAs or equivalent agreements. No plan is listed as an exception.[1] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Zapier says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Zapier AI features (Agents, Copilot, Chatbots, AI steps) | Excluded | No BAA exists for any Zapier service, so the AI features are not covered either. The privacy FAQ does not discuss the AI products separately. The no-PHI position is platform-wide.[1] |
Workspace and collaboration AI that offer a BAA
- Adobe Acrobat AI AssistantBAA on: Acrobat Studio for enterprise: Analyzer in Acrobat, Acrobat Studio for enterprise: Knowledge Base in AcrobatSome plans only
- Airtable AIBAA on: Enterprise ScaleSome plans only
- Asana AIBAA on: AsanaGov, Enterprise+Some plans only
- Atlassian Rovo / Atlassian Intelligence (Confluence, Jira)BAA on: Enterprise, Standard / Premium (Jira, Jira Service Management, Jira Product Discovery, Confluence)Some plans only
- Box AIBAA on: Enterprise / Enterprise Plus / Enterprise AdvancedSome plans only
- ClickUp BrainBAA on: EnterpriseSome plans only
All BAA-ready alternatives to Zapier (incl. Zapier AI / Agents)
Sources
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.