BBAA Atlas

Is Anthropic (Claude) HIPAA compliant?

AI / LLM API · vendor site ↗

BAA on select plansPHI with conditionsSOC 2 Type II
Will Anthropic (Claude) sign a HIPAA BAA?
Sometimes — Anthropic (Claude) signs a HIPAA BAA only on specific plans or add-ons.
Anthropic provides a BAA covering its HIPAA-ready services: the first-party Claude API and sales-assisted Claude Enterprise plans. Enterprise customers must activate HIPAA in admin settings and accept the BAA; Free, Pro, Max, Team, self-serve Enterprise, Workbench/Console and beta features are not covered.
PHI eligibility
PHI may be processed only on the HIPAA-configured first-party API or a HIPAA-enabled sales-assisted Claude Enterprise plan with a signed/accepted BAA; consumer tiers, self-serve Enterprise, Workbench, Console and beta features are out of scope.
SOC 2
SOC 2 Type II
Trust center
trust.anthropic.com ↗
Sub-processors
anthropic.com ↗
Notes
BAAs signed for the API before 2025-12-02 cover API usage only and do not extend to the HIPAA-ready Enterprise plan. Claude Code is covered only if the org has an executed BAA and Zero Data Retention enabled.
Last verified 2026-05-31confidence: high· Vendor terms change — confirm directly with Anthropic (Claude) before storing PHI.

Get notified when this changes

We track Anthropic (Claude)'s BAA and HIPAA status. Leave your email and we'll send one note if the verdict on this page changes.

One email per change. No newsletter, no selling your address.

How to request and sign a BAA with Anthropic (Claude)

Sometimes — Anthropic (Claude) signs a HIPAA BAA only on specific plans or add-ons.

Request routeSelf-serve — enable it in your account
  1. 1
    Get on a qualifying plan
    Anthropic provides a BAA covering its HIPAA-ready services: the first-party Claude API and sales-assisted Claude Enterprise plans. Enterprise customers must activate HIPAA in admin settings and accept the BAA; Free, Pro, Max, Team, self-serve Enterprise, Workbench/Console and beta features are not covered.
  2. 2
    Request the Business Associate Agreement
    Anthropic (Claude) lets you obtain the BAA without a sales call. Follow the path named in the plan requirement above — typically an in-product toggle or a billing / compliance settings page — then request and accept the agreement from your own account.
  3. 3
    Confirm what PHI is allowed before you store any
    PHI may be processed only on the HIPAA-configured first-party API or a HIPAA-enabled sales-assisted Claude Enterprise plan with a signed/accepted BAA; consumer tiers, self-serve Enterprise, Workbench, Console and beta features are out of scope. Match your configuration to this scope before putting protected health information into Anthropic (Claude).
Before you sign — watch for
  • Beta / early-access features can be excluded from BAA coverage — keep PHI out of them.
Last verified 2026-05-31 · Plan tiers and BAA terms change often — confirm the current process directly with Anthropic (Claude) before you rely on it. This is cited public information, not legal advice.

Frequently asked questions

Does Anthropic (Claude) sign a HIPAA Business Associate Agreement (BAA)?
Sometimes — Anthropic (Claude) signs a HIPAA BAA only on specific plans or add-ons. Anthropic provides a BAA covering its HIPAA-ready services: the first-party Claude API and sales-assisted Claude Enterprise plans. Enterprise customers must activate HIPAA in admin settings and accept the BAA; Free, Pro, Max, Team, self-serve Enterprise, Workbench/Console and beta features are not covered.
Is Anthropic (Claude) HIPAA compliant?
Anthropic (Claude) can be HIPAA-compliant only on the specific plans or add-ons where it will sign a Business Associate Agreement (BAA). PHI may be processed only on the HIPAA-configured first-party API or a HIPAA-enabled sales-assisted Claude Enterprise plan with a signed/accepted BAA; consumer tiers, self-serve Enterprise, Workbench, Console and beta features are out of scope.
Can you store PHI (protected health information) in Anthropic (Claude)?
PHI may be processed only on the HIPAA-configured first-party API or a HIPAA-enabled sales-assisted Claude Enterprise plan with a signed/accepted BAA; consumer tiers, self-serve Enterprise, Workbench, Console and beta features are out of scope.
Is Anthropic (Claude) SOC 2 certified?
Anthropic (Claude) reports a SOC 2 Type II attestation according to its public security documentation.
How do I request a HIPAA BAA from Anthropic (Claude)?
Anthropic (Claude) lets you obtain the BAA without a sales call. Follow the path named in the plan requirement above — typically an in-product toggle or a billing / compliance settings page — then request and accept the agreement from your own account. Confirm current terms directly with Anthropic (Claude) before storing PHI.
What plan do I need to sign a BAA with Anthropic (Claude)?
Anthropic provides a BAA covering its HIPAA-ready services: the first-party Claude API and sales-assisted Claude Enterprise plans. Enterprise customers must activate HIPAA in admin settings and accept the BAA; Free, Pro, Max, Team, self-serve Enterprise, Workbench/Console and beta features are not covered.

Sources

Business Associate Agreements (BAA) for Commercial Customers — Claude Help Center
https://support.claude.com/en/articles/8114513-business-associate-agreements-baa-for-commercial-customers
Supports: Anthropic provides a BAA for HIPAA-ready services (first-party API, Enterprise); excludes Free/Pro/Max/Team, Workbench, Console, betasdated: undated
What Certifications has Anthropic obtained? — Anthropic Privacy Center
https://privacy.claude.com/en/articles/10015870-what-certifications-has-anthropic-obtained
Supports: SOC 2 Type I & Type II, ISO 27001:2022, ISO/IEC 42001:2023, HIPAA-ready (BAA available)dated: undated
This page is cited public information, not legal or compliance advice. A BAA's availability can depend on your specific plan, region, and contract. Always confirm current terms with Anthropic (Claude) before processing protected health information.

Check another vendor

AssemblyAISigns a BAADeepgramSigns a BAAOpenAIBAA on select plansActiveCampaignBAA on select plansAcuity SchedulingBAA on select plansAdobe Acrobat SignBAA on select plans

See all HIPAA compliant AI & LLM APIs →
Browse all 105 vendors by category →