OpenAI API: eligible organizations can now accept a BAA themselves
On October 5, 2026, OpenAI added an in-product flow in API Organization settings > General: admins of eligible organizations can accept the standard Business Associate Agreement and enable HIPAA compliance support without going through sales. OpenAI's current list of BAA-eligible ChatGPT services names ChatGPT for Healthcare, Enterprise with the Regulated Workspace, FedRAMP and ChatGPT for Clinicians.
What changed. Getting a BAA for the OpenAI API used to mean contacting OpenAI. Since October 5, 2026, admins of eligible organizations can accept the standard BAA and turn on HIPAA compliance support themselves in API Organization settings > General. The July 2026 HIPAA guide’s other conditions still matter: PHI only to the HIPAA endpoints OpenAI lists, with a Modified Retention setting active for each project that sends it.
Also changed. OpenAI’s current list of BAA-eligible ChatGPT services names ChatGPT for Healthcare, ChatGPT Enterprise with the Regulated Workspace, ChatGPT FedRAMP and ChatGPT for Clinicians. The July guide also named ChatGPT Edu with the Regulated Workspace; if you use Edu, confirm eligibility with OpenAI. Consumer plans (Free, Go, Plus, Pro) and ChatGPT Business remain ineligible.
What we updated. The OpenAI API, ChatGPT for Healthcare and Enterprise, and ChatGPT pages, and the AI tools comparison.