Skip to main content
BAA Directory

Does Claude sign a BAA?

The answer

Signs a BAA on specific plans

Yes, for Anthropic's HIPAA-ready services, such as its first-party API and Claude Enterprise plans, once the BAA is accepted.

AI assistants. Checked on the vendor's own pages on .

Using Claude on a healthcare site? Curve Compliance keeps your ad tracking HIPAA-compliant around it, under a BAA on every plan. Book a call

On this page

What Anthropic says

“Anthropic provides a BAA covering our HIPAA-ready services, such as use of our first-party API or Enterprise plans.”

Source: Anthropic Privacy Center, Business Associate Agreements (BAA) for Commercial Customers, checked .

“Standard Claude Enterprise plans do not include BAA coverage without action from a Primary Owner.”

Source: Anthropic Privacy Center, Business Associate Agreements (BAA) for Commercial Customers, checked .

What the BAA covers and excludes

Excludes or limits, in Anthropic's words:

  • "For clarity, the BAA only covers the single organization that accepted it, and excludes features such as Claude Console, Claude Cowork, or features currently in beta such as Claude in Office, Claude Design, Claude Slides, and Claude Docs."

What this means for ad tracking

Marketing teams use Claude to analyze campaign exports, call notes and lead lists. Whatever is pasted in or sent through the API is shared with Anthropic.

Outside the products Anthropic names, keep patient details out of Claude. Campaign and conversion data that carries no health information is the safer input either way.

Curve Compliance gives your team conversion data to work from that has been checked for PHI-like patterns and sent server-side under a BAA Curve signs on every plan. Book a call to see it on your own funnel.

A business associate agreement binds only the vendor that signs it, so each vendor that handles patient information for you needs its own.

How Curve helps

  • Curve gives you conversion data that is already stripped of PHI-like patterns, so the numbers you analyze are not patient records.
  • Curve tracks conversions server-side in place of pixels, so they reach your ad platforms from Curve's server, not from the patient's browser.
  • Curve checks every event for PHI-like patterns before it goes out, and its neutral event names keep conditions and treatments out of what the platforms see.
  • Curve hashes identifiers with SHA-256 to each platform's requirements.
  • Curve adds consent management to your site, alongside the tracking.
  • Curve signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup for you in about a week.

Book a call with Curve and Curve's team will walk through your tracking setup with you.

Read the full guide

For the full picture on Claude and patient data, read Is Claude HIPAA Compliant? BAA Options Explained.

Frequently asked questions

Is Claude HIPAA compliant?

Yes, for Anthropic's HIPAA-ready services, such as its first-party API and Claude Enterprise plans, once the BAA is accepted. With a signed BAA, Claude can handle patient information for you, set up the way the vendor describes. The BAA does not cover ad pixels or tags on the same pages, because they send data to other companies.

Does Claude sign a BAA?

Yes, for Anthropic's HIPAA-ready services, such as its first-party API and Claude Enterprise plans, once the BAA is accepted. In Anthropic's words: “Standard Claude Enterprise plans do not include BAA coverage without action from a Primary Owner.” We checked Anthropic's own pages on September 29, 2026.

Which Claude plans include a BAA?

Anthropic's BAA covers its HIPAA-ready services, such as the first-party API and Claude Enterprise plans. On Enterprise, the Primary Owner activates HIPAA compliance and accepts the BAA; for the API, the Primary Owner signs and then contacts Anthropic to turn it on.

Should I paste patient data into Claude to analyze campaigns?

Only under a BAA that covers the Anthropic product you use. Otherwise, work from conversion data without health information. Curve checks every conversion event for PHI-like patterns before it goes to your ad platforms.

Does Curve Compliance sign a BAA?

Yes. Curve Compliance signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup in about a week. Book a call to get started.

Sources

Last checked . Vendors change their plans and terms, so confirm the current terms with Anthropic before you send it patient data.

See every tool in the BAA Directory.

Track ad conversions under a BAA

Curve signs a BAA on every plan. Curve's team sets up HIPAA-compliant conversion tracking for you in about a week, sending conversions server-side in place of pixels.

Book a call