Is Jasper HIPAA compliant?

Unverified

Jasper AI, Inc. · Writing

Not verified. Check directly with Jasper AI, Inc. before using Jasper with protected health information (PHI).

What we checked

This assessment separates the consumer product from any business plan. It uses the vendor documents linked below; an unverified item is not a pass.

Business Associate Agreement: Not verified; No public BAA was confirmed. Treat PHI use as blocked until Jasper AI, Inc. provides written terms.
Enterprise route: Enterprise; For regulated use, validate the BAA, configured service and users under the Enterprise contract.
Default data training: No by default; Jasper has no free tier (trial only); its trust page states company data and outputs are never used to train the underlying third-party LLMs, so the default trial/starter behavior is no training.
Business-tier training: No by default; Jasper states 'Your company data and outputs are never used to train third-party LLMs,' applying to paid Team/Business/Enterprise tiers by default.

Practical risk: Jasper relies on third-party LLM providers (e.g., OpenAI/Anthropic) under no-training API agreements, so an at-work user's confidential prompts still transit external model vendors and trust rests on contractual rather than self-hosted controls.

How to make a decision

Check the precise account tier, written contract and intended data before approving Jasper. A security certification, DPA or setting can apply to only part of a vendor's service. Keep the source links with your supplier review and revisit them when the vendor changes its terms.

More on Jasper

Is Jasper GDPR compliant?Is Jasper SOC 2 compliant?Is Jasper ISO 27001 certified?Does Jasper train on your data?

See the full Jasper risk profile, with every data-handling fact and its source, or browse all rated AI tools.