Does OpenAI sign a HIPAA BAA for its AI tools?
OpenAI’s AI tools we track, whether each comes with a HIPAA business associate agreement (BAA), and a dated record of what changed. Every verdict links to OpenAI’s own pages.
OpenAI’s AI tools
| Tool | BAA | Plans with a BAA | Checked |
|---|---|---|---|
| ChatGPTAI chat assistants | Some plans only | Enterprise; Edu; ChatGPT for Healthcare; ChatGPT for Clinicians; ChatGPT FedRAMP | Oct 11, 2026 |
| OpenAI API platformLLM APIs | Signs a BAA | API (pay-as-you-go / self-serve organizations); API (enterprise / sales-managed accounts); API FedRAMP (with Modified Retention) | Oct 11, 2026 |
| OpenAI CodexAI coding tools | Some plans only | ChatGPT for Healthcare / ChatGPT for Clinicians / Enterprise or Edu with Regulated Workspace; OpenAI API (API key sign-in) with Modified Retention | Oct 11, 2026 |
OpenAI’s own compliance pages: trust center.
History
Every change to a OpenAI verdict, plan or AI feature since we started tracking, plus re-checks that found no change. Our own corrections are marked as such.
- ListedChatGPT: Added to AI Vendor BAA Check.
- ListedOpenAI API platform: Added to AI Vendor BAA Check.
- ListedOpenAI Codex: Added to AI Vendor BAA Check.
All vendors: What changed · RSS feed
Cite this
AI Vendor BAA Check. (n.d.). Does OpenAI sign a HIPAA BAA for its AI tools? Retrieved October 11, 2026, from https://aivendorbaacheck.com/vendors/openai
Verdicts summarize OpenAI’s published terms as of the dates shown. A signed BAA is necessary but not sufficient for HIPAA compliance. Not legal advice.