Is CompliantChatGPT HIPAA compliant?
An AI chat assistant for healthcare using OpenAI, Anthropic and Google models. A standard BAA is available from the app's Settings on all plans, including the trial, and the vendor states its AI and transcription providers operate under BAAs with it.
CompliantChatGPT signs a Business Associate Agreement. The terms make a standard BAA available through Settings or on request, and say it may apply to all plan tiers, including trial and paid subscriptions.
A BAA alone does not make its use HIPAA compliant: set it up as described under What to configure, and cover it in your risk analysis.
Source: CompliantChatGPT — Terms and Conditions · checked
Choosing a tool is one part of HIPAA. See everything you need to have in place → · Managing several vendors? Free Vendor & BAA Register →
BAA details
| Signs a BAA | Yes | CompliantChatGPT — Terms and Conditions |
|---|
What you still have to configure
- Request the BAA under Settings before entering PHI. source
- Decide whether to keep PHI Guard on — it tokenizes PHI before it reaches AI providers; with it off, PHI is sent under the vendor's BAAs with those providers. source
Limitations
- Files and audio may go to third-party OCR and transcription providers; the vendor states those handling PHI are under BAAs. source
Against our criteria
| BAA without a sales process | Yes — Requested in Settings. | CompliantChatGPT — Terms and Conditions |
|---|---|---|
| Covers a ready-to-use chat app | Yes — The CompliantChatGPT app. | CompliantChatGPT — Terms and Conditions |
Alternatives
- Amazon Bedrock →BAA: yes
- Azure OpenAI (Microsoft Foundry) →BAA: yes
- BastionGPT →BAA: yes
- ChatGPT (Free, Go, Plus, Pro and Business) →BAA: no
- ChatGPT for Clinicians →BAA: conditional
- ChatGPT for Healthcare and Enterprise →BAA: conditional
- Claude (Anthropic) →BAA: conditional
- Gemini in Google Workspace →BAA: conditional
- Google Cloud Vertex AI and Gemini Enterprise →BAA: yes
- Microsoft 365 Copilot →BAA: conditional
- OpenAI API →BAA: conditional