Who signs a BAA?
A Business Associate Agreement (BAA) is required under HIPAA before a vendor handles your patients' health information. Always get the signed BAA from the vendor yourself.
BAA stated on the vendor's own site (13)
| Vendor | What the source says | Source · checked |
|---|---|---|
| Freed | Yes: "We also sign Business Associate Agreements (BAAs) with healthcare organizations"; organization-wide BAA listed on group plans verified | https://www.getfreed.ai/security checked 2026-10-16 |
| Heidi Health | Yes: "We make a BAA available to every covered entity we work with" verified | https://www.heidihealth.com/hipaa checked 2026-10-16 |
| VoiceboxMD | Yes: BAA on every plan at no extra cost, including the free trial verified | https://voiceboxmd.com/security checked 2026-10-16 |
| BastionGPT | Yes: signed BAA on every plan, including the free trial verified | https://bastiongpt.com/security checked 2026-10-16 |
| Doximity Scribe | Yes: BAA with each individual user upon registration; institutional BAA in enterprise solutions verified | https://www.doximity.com/security checked 2026-10-16 |
| Twofold | Yes: signed BAA for every account at no extra cost verified | https://www.trytwofold.com/security checked 2026-10-16 |
| Mentalyc | Yes: every account covered by BAA created at signup verified | https://www.mentalyc.com/security checked 2026-10-16 |
| Upheal | Yes: "We provide a Business Associate Agreement (BAA) for every account" verified | https://www.upheal.io checked 2026-10-16 |
| Viva AI | Yes: "BAA signed for every practice" verified | https://www.getviva.ai checked 2026-10-16 |
| Talkie.ai | Yes: "BAAs executed with US healthcare clients" verified | https://www.talkie.ai/security checked 2026-10-16 |
| Pretty Good AI | Yes: signs a BAA before any patient data is touched verified | https://prettygoodai.com/security checked 2026-10-16 |
| Keragon | Yes: standard BAA on every paid plan, self-serve; custom BAAs on Enterprise verified | https://www.keragon.com/security checked 2026-10-16 |
| Flexbone | Yes: "Flexbone signs a HIPAA business associate agreement (BAA)" verified | https://flexbone.ai/security checked 2026-10-16 |
Not confirmed on the vendor's site (16)
Third-party claims shown for reference. "HIPAA compliant" marketing alone doesn't mean the vendor will sign a BAA.