Is Ada HIPAA compliant?

Yes

Ada · Customer support

Yes. Ada will sign a Business Associate Agreement (BAA) for Ada, usually on an enterprise plan, which is the baseline requirement for handling PHI.

What we checked

This assessment separates the consumer product from any business plan. It uses the vendor documents linked below; an unverified item is not a pass.

Business Associate Agreement: Confirmed; Ada publishes a BAA option. Confirm the exact plan and service are covered before sending PHI.
Enterprise route: Enterprise (the only tier) with an executed DPA, HIPAA documentation obtained during procurement, and a negotiated EU data-residency clause; For regulated use, validate the BAA, configured service and users under the Enterprise (the only tier) with an executed DPA, HIPAA documentation obtained during procurement, and a negotiated EU data-residency clause contract.
Default data training: No by default; Customer data is never used to train shared or public models; zero data retention with LLM providers, and any fine-tuning uses a single customer's own de-identified data. Ada is enterprise-only, so there is no consumer tier.
Business-tier training: No by default; Enterprise (the only tier) with an executed DPA, HIPAA documentation obtained during procurement, and a negotiated EU data-residency clause is the business tier recorded for this profile.

Practical risk: Ada is enterprise-only and says it never trains shared models on your data, holds SOC 2 Type II, publishes subprocessors and offers HIPAA documentation and negotiated EU residency. The open questions are ISO 27001 (not listed on its trust center) and confirming a named BAA before regulated deployment.

How to make a decision

Check the precise account tier, written contract and intended data before approving Ada. A security certification, DPA or setting can apply to only part of a vendor's service. Keep the source links with your supplier review and revisit them when the vendor changes its terms.

More on Ada

Is Ada GDPR compliant?Is Ada SOC 2 compliant?Is Ada ISO 27001 certified?Does Ada train on your data?

See the full Ada risk profile, with every data-handling fact and its source, or browse all rated AI tools.