13 AI tools, 22 tiers. What each vendor publishes about HIPAA BAA availability, model training, retention and attestation scope — every finding cited to the vendor's own documentation, with the date it was verified. No scoring, no rankings, no affiliate links. What they said, and where they said it.
Does ChatGPT have a HIPAA BAA? Not the tier you're probably on
Does Microsoft Copilot have a HIPAA BAA — and is it covered by Microsoft's SOC 2?
Does Claude have a HIPAA BAA? What Anthropic publishes for consumer vs commercial tiers
Does Google Gemini train on your data — and what survives when you delete a chat?
Does Otter.ai have a HIPAA BAA, and does it train on your recordings?
Does Zoom train on your meetings — and is AI Companion covered by your Zoom BAA?
Does Grammarly have a HIPAA BAA — and why is your contract now with Superhuman?
Does Slack AI train on your messages, and does your Slack BAA cover it?
Does Notion AI train on your workspace, and how long do its LLM providers keep your data?
Does Perplexity offer a HIPAA BAA — and what does "HIPAA aligned" actually mean?
Is GitHub Copilot covered by your Microsoft HIPAA BAA?
Does DeepL train on your text? Free and Pro give different answers
Is Teams transcription on by default — and can you shorten retention on transcripts you already have?