The full list, not just what fits on the landing page. Pick the job — get the tool we would reach for and why.
Start here
FreedOur pick
Covered by a BAA from the moment you sign up, with no procurement cycle to get through.
BAA is part of the platform terms, covered from account creation. Larger organisations can request a separate signed agreement.
sourceClaude (Pro, Team)Our pick
Reads the raw file and answers directly — no formulas to write first.
No BAA on Pro, Team, or Cowork — only on the API and HIPAA-ready Enterprise.
sourceChatGPT (Plus, Pro, Business)
No BAA on Plus, Pro, or Business — not even the paid Business tier.
sourceChatGPT for CliniciansOur pick
The only route here that covers an individual clinician without a sales conversation.
Separate in-product BAA flow for eligible individual clinicians — no sales-managed account required.
sourceClaude Enterprise (HIPAA-ready)
Covered once the Primary Owner activates HIPAA. Chat, Projects, Artifacts, Voice, Search, Research and Skills are in; Computer Use, Web Fetch, Files and Batch APIs are not.
sourceClaude API
Messages API and related endpoints eligible once a BAA is signed via sales. Covered models require 30-day retention, not zero data retention.
sourceClaude (Pro, Team)Our pick
Best tone control of the two, and it holds a reading level when asked.
No BAA on Pro, Team, or Cowork — only on the API and HIPAA-ready Enterprise.
sourceChatGPT (Plus, Pro, Business)
No BAA on Plus, Pro, or Business — not even the paid Business tier.
sourceClaude CodeOur pick
Turns a plain-language brief into a working tool without you writing code.
Covered under a BAA with zero data retention enabled. Remote mode, the web version, and the review and security tools are excluded.
sourceOpenAI API
BAA on request by emailing baa@openai.com — no enterprise agreement needed. Most API services covered, with a few exceptions.
sourceClaude CodeOur pick
Good at the one-off scripts that quietly eat an afternoon every week.
Covered under a BAA with zero data retention enabled. Remote mode, the web version, and the review and security tools are excluded.
sourceOpenAI API
BAA on request by emailing baa@openai.com — no enterprise agreement needed. Most API services covered, with a few exceptions.
sourceMicrosoft 365 CopilotOur pick
If the practice already has a Microsoft 365 BAA, Copilot and Copilot Chat are already on the covered list — no extra signature to chase.
Microsoft 365 Copilot and Microsoft 365 Copilot Chat are named in-scope services for Commercial and GCC Office 365 customers, covered by default under the Microsoft Online Services Data Protection Addendum — no separate sales BAA needed once an organization is a covered-entity or business-associate customer. Needs a commercial or GCC-managed tenant; a personal Microsoft account is not in scope.
sourceGemini in Workspace
Covered once a Workspace or Cloud Identity admin signs Google’s Business Associate Addendum. The Included Functionality list names the "Gemini app" and "Gemini in Workspace" specifically, and excludes Gemini in Chrome. Needs an organisation-managed account, never a personal Google account.
sourceNotion AI
A BAA is available only on the Enterprise plan, so no other plan is covered at all. On Enterprise, Notion states that "Any Beta Services are not covered by the BAA" but does not say whether Notion AI counts as one — its own page leaves the AI unaddressed.
source