Is Freed HIPAA compliant? Does it sign a BAA?
The answer
Signs a BAA
Yes. Freed says its BAA is part of its platform Terms of Use, so you accept it when you sign up, and a signed copy is available on request.
Using Freed on a healthcare site? Curve Compliance keeps your ad tracking HIPAA-compliant around it, under a BAA on every plan. Book a call
On this page
What Freed says
“Yes, the BAA is included as Schedule A of Freed's platform Terms of Use. When you sign up for Freed, you automatically accept the terms, including the BAA.”
“If your organization requires a separate, signed BAA for record-keeping or compliance purposes, Freed provides an easy process to request one”
“We also sign Business Associate Agreements (BAAs) with healthcare organizations, which is a legal requirement under HIPAA that ensures we handle patient information safely and securely.”
What the BAA covers and excludes
Covers, in Freed's words:
- "The BAA included in the platform terms covers individual clinicians and small practices."
- "For larger organizations requiring an organization-wide BAA, Freed can generate a separate agreement for review and signature."
What this means for ad tracking
Freed describes itself as an AI medical scribe for clinical notes (Freed), so its recordings and notes put a patient's name next to their condition. Freed says patient recordings are “saved only until the note has been completed, then automatically deleted” (Freed).
That BAA covers Freed. A BAA binds only the vendor that signs it. This directory lists Meta and Google Ads as not signing a BAA, so data from your practice website should reach them with no health details. Our guide to HIPAA compliant AI tools covers other AI tools.
Curve Compliance helps with that part: it sends the conversion itself server-side under a BAA it signs on every plan, sends each platform only a fixed list of fields, and detects PHI-like patterns before data reaches an ad platform. Book a call to see it on your own funnel.
A business associate agreement binds only the vendor that signs it, so each vendor that handles patient information for you needs its own.
How Curve helps
- Curve carries the conversion signal to your ad platforms separately, under its own BAA, so you can keep Freed for what it does well.
- Curve replaces browser ad pixels with one script and sends conversions server-side to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn from Curve's servers.
- Curve detects PHI-like patterns, such as condition names, form answers and emails in URLs, before data reaches an ad platform, and flags them so they can be stopped at the source.
- Each platform receives only a fixed list of fields. Contact identifiers are off by default on Meta, Google Ads and TikTok, and events can use neutral names.
- Event Logs show what Curve sent to each platform and what the platform accepted.
- Curve signs a BAA on every plan, and Curve's team does the setup for you, typically live in about a week.
Book a call with Curve and Curve's team will walk through your tracking setup with you.
Frequently asked questions
Does Freed sign a BAA?
Yes. In Freed's words: “the BAA is included as Schedule A of Freed's platform Terms of Use. When you sign up for Freed, you automatically accept the terms, including the BAA” (Freed Help Center). We checked Freed's own pages on November 2, 2026.
Is Freed HIPAA compliant?
Freed says “Our technology is HIPAA-compliant, uses industry best practices, and doesn't store patient recordings”, and that it signs BAAs with healthcare organizations (Freed). How you use it is still your responsibility, so talk to your counsel about your own setup.
How do I get a signed BAA from Freed?
Freed says a standalone signed copy is needed only if your organization asks for one. You request it through Freed's BAA request form, and “the Freed team will follow up with you to complete the process” (Freed Help Center).
Who should sign Freed's BAA?
Freed says “A BAA must be signed by an individual or entity authorized to legally bind the organization, such as a practice owner, group administrator, or operations leader” (Freed Help Center).
What does Curve Compliance do for ad tracking?
Curve replaces browser ad pixels with one script and sends conversions server-side to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn. It detects PHI-like patterns before data reaches an ad platform, and Event Logs show what Curve sent to each platform and what the platform accepted. Book a call to see it on your own funnel.
Does Curve Compliance sign a BAA?
Yes. Curve Compliance signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup, typically live in about a week. Book a call to get started.
Sources
- Freed Scribe Help Center, How can I obtain a Business Associate Agreement (BAA) with Freed Scribe to ensure HIPAA compliance? (Is the BAA Included in Freed's Platform Terms?)
- Freed, Security & Privacy (FAQ: Is it safe for me to input protected health information?)
Last checked . Vendors change their plans and terms, so confirm the current terms with Freed before you send it patient data.
Related tools
- Does Heidi sign a BAA?Signs a BAA. Every covered entity Heidi works with.
- Does Abridge sign a BAA?Signs a BAA. Healthcare customers such as hospitals and health systems, under their customer agreements.
- Does Plaud sign a BAA?Signs a BAA. On request, through Plaud's privacy team.
- Does Otter.ai sign a BAA?Signs a BAA on specific plans. Enterprise plan.
- Does OpenEvidence sign a BAA?Signs a BAA. Healthcare providers that are covered entities; BAA is part of the Terms of Use.
- Does ChatGPT sign a BAA?Signs a BAA on specific plans. ChatGPT for Healthcare, Enterprise with Regulated Workspace, FedRAMP or Clinicians; API with Modified Retention.
- Does Meta sign a BAA?Does not sign a BAA. Business Tools Terms bar health information.
- Does Google Ads sign a BAA?Does not sign a BAA. Google Ads call terms disclaim HIPAA.
- Does Curve Compliance sign a BAA?Signs a BAA. Every plan: Compliance, Growth and Enterprise.
Track ad conversions under a BAA
Curve signs a BAA on every plan. Curve's team sets up HIPAA-compliant conversion tracking for you in about a week, sending conversions server-side in place of pixels.
Book a call