Is Heidi HIPAA compliant?
Heidi's BAA is part of its terms on every plan, including the free one. Accepting the terms signs it for a covered entity.
- Maker
- Heidi Health Corp.
- Last checked
- November 11, 2026
- In the index
- Full assessment of Heidi
Plan by plan
A business associate agreement (BAA) is the contract HIPAA requires before a tool handles patient information.
| Plan | BAA available | Detail |
|---|---|---|
| Free | Yes | The BAA is entered by accepting the Terms of Use. |
| Clinician | Yes | The BAA is entered by accepting the Terms of Use. |
| Teams | Yes | Sold with custom terms. A BAA already agreed with Heidi stays in force unless it is expressly replaced. |
What that means in practice
The BAA is built into Heidi's Terms of Use. Section 5.3 says that for a covered entity or business associate whose content includes protected health information, accepting the terms includes signing the BAA. There is no separate request to make and no plan to upgrade to.
The agreement is posted in full, dated September 29, 2026, and can be downloaded as a PDF. For United States customers the business associate is Heidi Health Corp.
Heidi's HIPAA page says a BAA is available to every covered entity it works with. An organization that has already signed a BAA with Heidi keeps that agreement unless both sides expressly replace it.
How to read this answer
HIPAA has no certificate a product can hold. The part that can be checked is whether the maker signs a business associate agreement, and for which plans.
A signed agreement is where compliant use starts. The practice still has to set the tool up correctly, control who can use it, and train staff.
This page records what Heidi Health Corp. documents. It is not legal advice. See the regulatory compliance guide or the HIPAA status of other AI tools.