Is Deepgram HIPAA compliant?

AI / LLM API · vendor site ↗

Signs a BAAPHI eligibleSOC 2 Type II
Will Deepgram sign a HIPAA BAA?
Yes — Deepgram will sign a HIPAA Business Associate Agreement (BAA).
Deepgram acts as a business associate for customers who are HIPAA Covered Entities and provide ePHI, and provides its BAA on request. No specific plan tier is required per Deepgram's compliance docs.
PHI eligibility
ePHI may be transcribed/processed under a signed BAA with appropriate controls; Deepgram offers automatic PHI redaction (redact=phi) and self-hosted/VPC and EU-residency deployment options.
SOC 2
SOC 2 Type II
Sub-processors
Notes
Deepgram holds SOC 2 Type I and Type II; BAA is provided to qualifying Covered Entities on request.
Last verified 2026-05-31confidence: high· Vendor terms change — confirm directly with Deepgram before storing PHI.

Get notified when this changes

We track Deepgram's BAA and HIPAA status. Leave your email and we'll send one note if the verdict on this page changes.

One email per change. No newsletter, no selling your address.

How to request and sign a BAA with Deepgram

Yes — Deepgram will sign a HIPAA Business Associate Agreement (BAA).

Request routeBy request — via trust center or support
  1. 1
    Confirm your account is covered
    Deepgram acts as a business associate for customers who are HIPAA Covered Entities and provide ePHI, and provides its BAA on request. No specific plan tier is required per Deepgram's compliance docs.
  2. 2
    Request the Business Associate Agreement
    Deepgram provides the BAA on request. Open a request through Deepgram's trust center and ask for the current Business Associate Agreement covering your plan.
  3. 3
    Confirm what PHI is allowed before you store any
    ePHI may be transcribed/processed under a signed BAA with appropriate controls; Deepgram offers automatic PHI redaction (redact=phi) and self-hosted/VPC and EU-residency deployment options. Match your configuration to this scope before putting protected health information into Deepgram.
Last verified 2026-05-31 · Plan tiers and BAA terms change often — confirm the current process directly with Deepgram before you rely on it. This is cited public information, not legal advice.

Frequently asked questions

Does Deepgram sign a HIPAA Business Associate Agreement (BAA)?
Yes — Deepgram will sign a HIPAA Business Associate Agreement (BAA). Deepgram acts as a business associate for customers who are HIPAA Covered Entities and provide ePHI, and provides its BAA on request. No specific plan tier is required per Deepgram's compliance docs.
Is Deepgram HIPAA compliant?
Deepgram can be used in a HIPAA-compliant way: it signs a Business Associate Agreement (BAA), which HIPAA requires before you process PHI with a vendor. ePHI may be transcribed/processed under a signed BAA with appropriate controls; Deepgram offers automatic PHI redaction (redact=phi) and self-hosted/VPC and EU-residency deployment options.
Can you store PHI (protected health information) in Deepgram?
ePHI may be transcribed/processed under a signed BAA with appropriate controls; Deepgram offers automatic PHI redaction (redact=phi) and self-hosted/VPC and EU-residency deployment options.
Is Deepgram SOC 2 certified?
Deepgram reports a SOC 2 Type II attestation according to its public security documentation.
How do I request a HIPAA BAA from Deepgram?
Deepgram provides the BAA on request. Open a request through Deepgram's trust center and ask for the current Business Associate Agreement covering your plan. Confirm current terms directly with Deepgram before storing PHI.
What plan do I need to sign a BAA with Deepgram?
Deepgram acts as a business associate for customers who are HIPAA Covered Entities and provide ePHI, and provides its BAA on request. No specific plan tier is required per Deepgram's compliance docs.

Sources

https://developers.deepgram.com/trust-security/data-privacy-compliance
Supports: Provides its BAA to qualifying customers on request; SOC 2 Type I & IIdated: undated
This page is cited public information, not legal or compliance advice. A BAA's availability can depend on your specific plan, region, and contract. Always confirm current terms with Deepgram before processing protected health information.

Check another vendor