This article details which Anthropic commercial products and API features qualify under a HIPAA Business Associate Agreement. It breaks down covered and non-covered services, notes beta and third-party integration exclusions, and highlights ZDR requirements for handling PHI in Claude Code.

This article explains how healthcare organizations can get a HIPAA-compliant Business Associate Agreement with OpenAI to process protected health information via the API. Email baa@openai.com with your company details and use case; most requests are approved within a few business days. If your request is denied, you can seek reconsideration through your sales contact.

The article provides official guidance on how the Health Insurance Portability and Accountability Act (HIPAA) applies to online tracking technologies. It emphasizes the importance of protecting patient privacy and ensuring compliance when using digital tools for tracking purposes. The content is aimed at professionals navigating these regulations.

Anthropic offers Business Associate Agreements (BAA) for its HIPAA eligible services, specifically for commercial products like Claude for Work and the Anthropic API. However, the BAA does not cover certain services and has specific configuration requirements and limitations. To start the BAA process or learn more, customers should contact the sales team.