Clinicians That Code
Guides
BAA fact table changelog

Full changelog notes

87 entries · newest first · the trimmed per-card view lives on the BAA guide page

Each entry is the working note behind one change to the BAA fact table. The card on the guide page shows a one-line summary; this page holds the full text, unedited, and the open data endpoint serves both ( which-platforms-sign-a-baa.json).

  • Supabase2026-11-11 · watch alert 2026-11-11 (coverage: the compute fact phrase gone from the Backups page). Re-checked live: the Backups page now states that Point in Time Recovery (PITR) is available on all compute sizes, and that Pro, Team and Enterprise projects can enable it as an add-on; the Small compute add-on requirement recorded on 2026-11-04 is no longer there. Note corrected: the compute condition removed. Other row facts re-verified live unchanged (Team from USD 599/month, HIPAA available as paid add-on, BAA requested from the dashboard by Team and Enterprise customers, High Compliance requirements, self-hosted out of scope, Europe general region). Fact phrase on the Backups page swapped to the new sentence.
  • Amazon Bedrock (AWS)2026-11-11 · watch alert 2026-11-11 (coverage: one fact phrase gone from the abuse-detection page). Re-checked live: the abuse-detection page now describes AWS's Enterprise Frontier Safeguards programme, under which eligible customers get zero data retention on the Claude Fable models it names for internal use through at least 30 June 2027 (Claude Mythos models are not covered; access to them is handled separately), and says eligible customers can request full zero data retention for the OpenAI models through their AWS account team. Note rewritten: the retention sentence now names the Fable model family instead of individual versions, and both zero-retention routes are added. Other row facts re-verified live unchanged (eligible-services list dated October 15, 2026 with Amazon Bedrock and Amazon Bedrock AgentCore, BAA via AWS Artifact, retention modes, base models not improved with customer content, geographic cross-Region inference, SCCs in the DPA, batch at 50% of on-demand). The Enterprise Frontier Safeguards page added as a source.
  • Resend2026-11-11 · watch alert 2026-11-11 (coverage: one fact phrase gone from the GDPR page). Re-checked live: RunPod is no longer on Resend's GDPR page or its sub-processor list; TypeSafe AI, Inc. (USA) is now listed as a sub-processor and processes a sample of sent emails to detect spam and phishing, with zero data retention and no model training. Anthropic now also receives content through the AI features in Inboxes; normal sending through the Emails API is not sent to Anthropic. Note corrected. Other row facts re-verified live unchanged (not HIPAA compliant and cannot sign a BAA; PHI only under a BAA signed by both parties if set forth in the Order Form, per the Enterprise Terms last updated August 17th, 2026; submitting PHI otherwise is a breach of Section 2.2; eu-west-1 sending region with stored data in the US). Resend's pricing page (Enterprise: 'Custom usage plan', 'Contact us') added as a source for the custom-pricing claim.
  • Twilio (Programmable Voice)2026-11-11 · Row added (reader suggestion, X, 2026-11-10: voice and telephony is where PHI enters a voice-first care app). Verified against Twilio's own pages on 2026-11-11 with a second-reader pass: BAA only on Security Edition or Enterprise Edition (price not published); Programmable Voice is on the HIPAA Eligible Products and Services list (last updated June 30, 2026), many Voice features with an asterisk; IE1 region limits recorded; AI-training default and zero data retention left at not-verified.
  • Vapi2026-11-11 · Row added (reader suggestion, X, 2026-11-10). Verified against Vapi's own pages on 2026-11-11 with a second-reader pass: HIPAA is a paid add-on at $2,000 / month per organization on Usage only or any Success Package; HIPAA mode is organisation-wide and mutually exclusive with Zero Data Retention; EU region on the Premier Success Package only; AI-training default left at not-verified because the terms do not say whether Vapi's own use of content includes model training.
  • ElevenLabs (ElevenLabs Agents)2026-11-11 · Row added (reader suggestion, X, 2026-11-10). Verified against ElevenLabs' own pages on 2026-11-11 with a second-reader pass: BAA only for Enterprise tier subscriptions; ElevenLabs Agents is the service named as HIPAA-eligible; an agent without Zero Retention Mode falls outside the BAA; EU data residency is an Enterprise feature; the agents privacy page's 6-year audio retention advice and the HIPAA page's Zero Retention Mode requirement are both recorded.
  • Deepgram2026-11-11 · Row added (reader suggestion, X, 2026-11-10). Verified against Deepgram's own pages on 2026-11-11 with a second-reader pass: the pricing page says BAAs are signed for Enterprise customers, the docs say on request; requests join the Model Improvement Program by default and mip_opt_out=true gives zero data retention per request; the EU endpoint is fully in-region only with the opt-out; no public DPA page was found.
  • Anthropic API2026-11-10 · Reader correction (X, 2026-11-10): the note said only 'current betas' were excluded. Anthropic's BAA page names the excluded betas as Claude in Office, Claude Design, Claude Slides and Claude Docs, and its Claude Enterprise table lists Claude Design, Claude Slides and Claude Docs [beta] as 'Not available yet for HIPAA-ready organizations'. Note updated to name them. No status change.
  • Base44 (Wix)2026-11-04 · watch alert 2026-11-04 (coverage: two residency fact phrases gone from the docs privacy and security page). Re-checked live: the docs page now has a 'HIPAA and health data' section stating Base44 is not HIPAA compliant and cannot sign a Business Associate Agreement (BAA), absent from the 2026-10-10 archived copy; the note's opening claim that no Base44 page mentions HIPAA or a BAA was therefore wrong and is replaced by Base44's own statement. Data residency now offers Australia as well as the EU and the UK; the Elite cut-off is worded 'before October 2026'. Note rewritten (status unchanged: no). Watch fact phrases on the docs page swapped to the new wording, plus a phrase for the BAA statement, so a reversal alerts. Second-reader pass (independent model, findings adjudicated against the live pages): all claims supported; the note now also says Exhibit C lists Supabase (US), which the security page omits.
  • Claude Code2026-11-04 · watch alert 2026-11-04: Anthropic added an Ultra consumer plan; the BAA page and the HIPAA-ready Enterprise plans article now list Free, Pro, Max and Ultra as not coverable. Note updated to name Ultra. The secondary fact phrase that listed the plans was replaced by two plan-list-free phrases (Enterprise eligibility, and the Team and individual plan exclusion), so the next plan addition does not break the check. Coverage routes, Covered Models, tier and price unchanged.
  • Supabase2026-11-04 · watch alert 2026-11-04 (coverage: one fact phrase gone from the HIPAA projects page). Re-checked live: the HIPAA projects page now lists the High Compliance requirement as 'Enabling Point in Time Recovery' without the compute condition; the Backups page states that projects using Point in Time Recovery (PITR) must also use at least a Small compute add-on. Row facts unchanged, note unchanged. Fact phrase shortened on the HIPAA projects page; the Backups page added as a source and as a secondary watch check for the compute requirement.
  • Anthropic API2026-11-04 · watch alert 2026-11-04: Anthropic added an Ultra consumer plan, now listed among the consumer products that are not ZDR-eligible and not covered by HIPAA readiness. Note updated: Team and individual plans (Free, Pro, Max and Ultra) cannot enable HIPAA. The rest of the diff changes no row fact: the CORS rule for ZDR organisations moved to the ZDR paragraph, and a new introduction restates that prompts and outputs are not retained by default except for Covered Models (30 days), which the note already says.
  • Cursor2026-10-28 · watch alert 2026-10-28: Cursor's Eligible Services list no longer names inline edit (the desktop IDE now reads Agent, Tab, Edit and local agent mode). Note rewritten to drop it; the page does not say inline edit is excluded, so the note only stops listing it. All other facts re-verified live unchanged. Watch now also checks the desktop IDE line.
  • Claude Code2026-10-28 · watch alert 2026-10-21 and 2026-10-28: Anthropic regrouped the cloud features table. Claude Code on the web and cloud sessions started from Claude Desktop are now one row (cloud sessions, whether started from the web, Claude Desktop or claude --cloud); Routines are now scheduled tasks that run in the cloud; computer access for cloud sessions is a new unavailable feature. Note rewritten to the current list, which also adds self-hosted environments and session sharing links (both on the page since at least 2026-10-14 but missing from the note). Coverage routes, Covered Models, tier and price unchanged. Watch fact phrases updated to the new row names.
  • Anthropic API2026-10-28 · watch alert 2026-10-21 and 2026-10-28: Anthropic moved the Console instructions; HIPAA readiness is now enabled on the Claude Console Data retention page (platform.claude.com/settings/privacy), no longer described as Settings > Data retention. min_tier and note rewritten to the new path; watch fact phrase swapped to match. The rest of the diff is typographic (straight to curly quotes). The same page now lists Claude in Microsoft Foundry (hosted on Anthropic or on Azure) as HIPAA-eligible with a BAA with Anthropic plus the HIPAA configuration on the Azure subscription, requested through the account team (on 2026-10-14 it said HIPAA readiness was not available on Microsoft Foundry); added as a third route in min_tier and the note (Bart's decision 2026-10-28), with a watch fact phrase so a reversal alerts. Second-reader pass (independent model, findings adjudicated against the live pages): corrected the blocked-features list; Computer Use is covered on the API (BAA page: 'Covered as Eligible Services under Anthropic BAA'; API retention page: HIPAA Yes), so five features are blocked, not six.
  • Azure OpenAI (Microsoft Foundry)2026-10-28 · Pointer added (Bart's decision 2026-10-28): Microsoft's BAA covers Foundry Models sold by Azure, while Claude in Microsoft Foundry is now HIPAA-eligible through Anthropic's own BAA (Anthropic API data retention page, 2026-10-28), so the note points readers to the Anthropic API row. No Microsoft fact changed; the row was not re-verified in this pass, so verified_on stays 2026-10-14.
  • Amazon Bedrock (AWS)2026-10-28 · watch alert 2026-10-21: AWS's HIPAA-eligible services list is now dated October 15, 2026 (was September 3, 2026); Amazon Bedrock and Amazon Bedrock AgentCore are still listed with no exclusion. Note rewritten to the new date. Other list changes (Amazon Connect renamed, one service removed) do not touch this row.
  • Google Gemini Enterprise Agent Platform (formerly Vertex AI)2026-10-28 · watch alert 2026-10-21 and 2026-10-28: the data-governance page no longer offers an exception to abuse-monitoring prompt logging. Google's abuse-monitoring page now ties it to your agreement: customers on the Google Cloud Platform Terms of Service are subject to it (flagged prompts kept up to 90 days), customers with a Google Cloud Master Agreement are exempt by default, and Google Frontier Models log prompts and responses inside your own environment for up to 30 days. Note rewritten; abuse-monitoring page added as a source and secondary watch check; the stale fact phrase replaced. Covered Products list on the HIPAA page lost Data Catalog (not a row fact); list date still 2025-09-17.
  • Lovable2026-10-14 · Re-verification pass 2026-10-14 (research card on the bartos board, every finding adjudicated against the live vendor pages before writing): all claims confirmed; the Terms now allow PHI only where a separate written agreement expressly permits it (the DPA still bars it outright), note reworded; the sub-processor list moved to the Trust Center (trust.lovable.dev/subprocessors). Watch now checks fact phrases.
  • Bolt.new (StackBlitz)2026-10-14 · Re-verification pass 2026-10-14 (research card on the bartos board, every finding adjudicated against the live vendor pages before writing): all claims confirmed; added that an opt-out is not retroactive and does not cover Forge Content while Forge is enabled. Watch now checks fact phrases.
  • Base44 (Wix)2026-10-14 · Re-verification pass 2026-10-14 (research card on the bartos board, every finding adjudicated against the live vendor pages before writing): one correction: EU/UK data residency now needs Business or Enterprise (Elite only for workspaces created before 2026-10-01), and media files of apps created from 2026-10-12 follow the chosen region; the training sentence now says Business-plan data can be used; the Exhibit C sub-processor list omits Langfuse and Logfire, now stated. Watch now checks fact phrases.
  • Replit2026-10-14 · Re-verification pass 2026-10-14 (research card on the bartos board, every finding adjudicated against the live vendor pages before writing): one correction and one unsupported claim removed: EU hosting is now a self-serve project geography on Core, Pro and Enterprise (permanent once published), not a sales request; the blog claim that only public Repls train AI could not be found and was removed. The Commercial Agreement URL now redirects to the Enterprise Agreement, whose training bar covers enterprise customers only; for other plans the privacy policy cites improving machine learning, so the AI-training default is now not-verified instead of no. Three source URLs updated to their current addresses. Watch now checks fact phrases.
  • v0 (Vercel)2026-10-14 · Re-verification pass 2026-10-14 (research card on the bartos board, every finding adjudicated against the live vendor pages before writing): all claims confirmed; the training sentence now matches the v0 pricing page and AI Product Terms (Business opted out by default, Enterprise never, Free and Plus without the commitment). Watch now checks fact phrases.
  • Cursor2026-10-14 · Status changed from not-applicable to enterprise-only (Bart's decision 2026-10-14): Cursor's own BAA page states 'Cursor supports HIPAA Business Associate Agreements (BAAs) for Enterprise customers' and 'BAA support is available on Enterprise'. Full re-verification of all sources (second reader: research card t_d43918cf, findings adjudicated against the live pages). Note rewritten: added the Eligible Services list, the gated Eligible Models list, Cloud Agents repository storage, abuse-detector retention and the retention-requiring Claude Fable models; removed 'your own API keys are not covered' (not on any Cursor page) and 'only for Enterprise' on the Privacy Mode default (no page states the Teams or individual default); terms date corrected to September 3, 2026. Source: privacy-overview now redirects to the data-use page; pricing page added. Watch re-anchored off the docs sidebar onto the BAA body with eight fact phrases and five secondary-source checks; hash pre-baselined.
  • Claude Code2026-10-14 · Status changed from not-applicable to enterprise-only (Bart's decision 2026-10-14): the table answers whether the vendor signs a BAA, and Anthropic's covers Claude Code through the Enterprise HIPAA configuration or a Console organisation with a signed BAA and ZDR enabled by the account team. Tier and price filled from Anthropic's BAA page, the API data retention page and the Claude pricing page ('$20 per seat per month plus usage billed at API rates', billed annually). The synthetic-data advice stays in the note and the guide text as guidance, not as a status.
  • Claude Code2026-10-14 · watch alert 2026-10-14: Anthropic scoped Projects and Artifacts to chat ('Projects (in chat)', 'Artifacts (in chat)') and now states that artifacts in Cowork (local mode) or Code (local mode) and published artifact pages are not covered; note extended. Every other recorded fact re-verified against the live BAA page and the five secondary sources (HIPAA-ready Enterprise article, API data retention, Claude Code data usage, DPA, data residency). Omission corrected: terminal sessions are covered only when Claude Code connects directly to Anthropic (via Bedrock, Google Cloud's Agent Platform, Microsoft Foundry, a gateway or a custom base URL is not covered); that table row was already on the page on 2026-10-07 and is now in the note. The two intro paragraphs shown as removed in the alert diff are still on the page: new lines above the anchor shifted the watch window past them. Measured coverage gap: the 10000-character window missed 7 of the row's facts; window widened to 15000, and the watch now lists verbatim fact phrases checked on every run plus presence checks on three secondary sources. Hash pre-baselined. Second-reader pass (an independent model re-checked every claim against the same live sources; findings adjudicated against the pages before writing): note reworded so the not-applicable table status and Anthropic's coverage routes no longer read as contradictory; added that the API's HIPAA readiness arrangement does not cover Claude Code, that the Primary Owner cannot remove the HIPAA configuration, and that flagged chats or sessions can be kept up to 2 years even under ZDR or HIPAA; 'Skills flipped' restated as current state.
  • Netlify2026-10-14 · Re-verification pass 2026-10-14 (research card on the bartos board, every finding adjudicated against the live vendor pages before writing): one correction: the announcement page is dated August 15, 2024 (the note said it carried no date); added that Edge Functions are excluded from the HIPAA offering. Watch now checks fact phrases.
  • Supabase2026-10-14 · Re-verification pass 2026-10-14 (research card on the bartos board, every finding adjudicated against the live vendor pages before writing): all claims confirmed; added the High Compliance project requirements and that the 'Europe' general region includes London and Zurich. Watch now checks fact phrases.
  • Firebase / Google Cloud2026-10-14 · Re-verification pass 2026-10-14 (research card on the bartos board, every finding adjudicated against the live vendor pages before writing): all claims confirmed; added Google's PHI restrictions on Identity Platform. Watch now checks fact phrases.
  • OpenAI API2026-10-14 · Re-verification pass 2026-10-14 (research card on the bartos board, every finding adjudicated against the live vendor pages before writing): all claims confirmed; added the 10% data-residency price uplift and the CSAM manual-review exception to zero retention. Watch now checks fact phrases.
  • Anthropic API2026-10-14 · Re-verification pass 2026-10-14 (research card on the bartos board, every finding adjudicated against the live vendor pages before writing): one unsupported figure removed: 'minimum 20 seats self-serve' is not on Anthropic's pricing page; price now quoted from it. Added that six API features are blocked, not just uncovered, on HIPAA-ready API organisations. Watch now checks fact phrases.
  • Azure OpenAI (Microsoft Foundry)2026-10-14 · Row created by splitting the combined Azure OpenAI / AWS Bedrock / Google Vertex AI row (Bart's decision 2026-10-14: one row cannot give one accurate answer per column for three vendors; history up to the split is on the AWS Bedrock row). Verified against Microsoft's own pages. In-scope status now confirmed from a primary list: the Azure Compliance Offerings PDF (Service Trust Portal, September 2026, no sign-in needed) ticks HIPAA BAA for 'Microsoft Foundry: Foundry Models', footnote 9 limiting scope to Foundry Models sold by Azure and excluding third-party model providers. Sub-processor list: Microsoft's Online Services Subprocessors List (2026-09-10) on the Service Trust Portal. Watch: Microsoft's HIPAA offering page with three fact phrases, plus four secondary checks. Second-reader pass (independent model, findings adjudicated against the live pages): no claim contradicted; price wording now sourced from Microsoft's Azure OpenAI pricing page. The HIPAA BAA tick for Foundry Models was confirmed on the rendered PDF page, since text extraction drops the tick glyphs.
  • Amazon Bedrock (AWS)2026-10-14 · Row created by splitting the combined Azure OpenAI / AWS Bedrock / Google Vertex AI row (Bart's decision 2026-10-14); the combined row's history is kept below. Verified against AWS's own pages: BAA self-serve in AWS Artifact, PHI only in HIPAA-eligible services in a HIPAA-designated account, Bedrock and AgentCore listed, zero retention as an explicit mode, 30-day abuse-detection retention for named models, EU geographic cross-Region inference, DPA via the Service Terms. Watch, hash and snapshot carried over from the combined row (same page, anchor and window). Second-reader pass (independent model, findings adjudicated against the live pages): no claim contradicted; price wording now sourced from AWS's Bedrock pricing page.
  • Amazon Bedrock (AWS)2026-10-14 · [combined row] watch alert 2026-10-14: the flagged diff was AWS site navigation only (a banner swap and a Careers link). Root cause: the hint 'Amazon Bedrock' first matched the navigation menu, so the hashed window never held the HIPAA list; the stored hash also moved on 2026-09-24, 09-28 and 09-30 with no fact change. Re-anchored to 'Amazon Bedrock AgentCore' (one occurrence, inside the list) with a 2000-character window covering the eligibility statement, the 'Last Updated' date and both Bedrock entries; hash pre-baselined. Full re-verification of all three providers, the first for Azure and Google since 2026-09-02: BAA availability unchanged at all three; the AWS list still reads 'Last Updated: September 3, 2026' with no Fable/Mythos exclusion. Corrections to the note: Bedrock zero retention is now an explicit data retention mode (none), not the default, because new accounts inherit each model's own retention default; Google's Covered Products also include Generative AI on Agent Platform and Google bars pre-GA offerings from PHI; the Foundry source moved to its current URL and a Bedrock data-retention source was added. Not re-confirmed from a primary list: Microsoft's per-service HIPAA scope sits in the Service Trust Portal, so Azure OpenAI's in-scope status rests on the Product Terms BAA as before. The watch now also checks fact phrases on eight secondary source pages. Second-reader pass (an independent model re-checked every claim against the same live sources; findings adjudicated against the pages before writing): 'available to any customer' qualified (Microsoft: covered entities and business associates; AWS: HIPAA-designated account); 'per service and per model' corrected to per listed service (no vendor publishes a model-level coverage list); Azure's default storage of flagged prompts for human review and Google's conditional zero retention added; Google's Covered Products list date (2025-09-17) disclosed; sources added for Google data governance, the Agent Platform rename and the Bedrock training statement.
  • Google Gemini Enterprise Agent Platform (formerly Vertex AI)2026-10-14 · Row created by splitting the combined Azure OpenAI / AWS Bedrock / Google Vertex AI row (Bart's decision 2026-10-14; history up to the split is on the AWS Bedrock row). Verified against Google's own pages: click-to-accept BAA, Covered Products list dated 2025-09-17 (watched, so a list update alerts), no pre-GA offerings for PHI, training restriction, the conditions for zero retention (default caching, abuse-monitoring exception, Search and Maps grounding storage that cannot be disabled), EU multi-region endpoint. Watch: Google's HIPAA page with five fact phrases, plus four secondary checks. Second-reader pass (independent model, findings adjudicated against the live pages): corrected the note, request-response logging is disabled by default and only stores data once enabled; only the Interactions API stores by default. Price wording now sourced from Google's pricing page.
  • Mistral AI2026-10-14 · Re-verification pass 2026-10-14 (research card on the bartos board, every finding adjudicated against the live vendor pages before writing): all claims confirmed; added the docs' third ZDR wording to the unreconciled inconsistency. Watch now checks fact phrases.
  • Clerk2026-10-14 · Re-verification pass 2026-10-14 (research card on the bartos board, every finding adjudicated against the live vendor pages before writing): all claims confirmed; the audit-report sentence reworded so it cannot be read as a BAA on Business, with the annual price added; the sub-processor list now lives in the Trust Center (trust.clerk.com). Watch now checks fact phrases.
  • Resend2026-10-14 · Re-verification pass 2026-10-14 (research card on the bartos board, every finding adjudicated against the live vendor pages before writing): all claims confirmed; added that PHI without a permitting Order Form breaches the Enterprise Terms, and the RunPod and Anthropic routes for email content. Watch now checks fact phrases.
  • GitHub2026-10-14 · Re-verification pass 2026-10-14 (research card on the bartos board, every finding adjudicated against the live vendor pages before writing): one partial correction: the training sentence now separates private repositories (not used unless given to an AI feature, opt-out for individual licences) from public ones (licensed for AI training, no opt-out); added the DPA's 'prior, written and specific consent' carve-out. Watch now checks fact phrases.
  • Lovable2026-10-07 · watch alert 2026-10-07: enterprise FAQ gained an EU inference question; an admin can enable EU inference in Privacy & security so the workspace AI model requests, for building and for the AI features of published apps, are served from model endpoints in the European Union. Note extended. BAA status unchanged (still does not sign BAAs); ZDR-default, 30-day opt-in, training-exclusion and code-residency facts unchanged.
  • Claude Code2026-10-07 · watch alert 2026-10-07 (third genuine change): Anthropic restructured the BAA page around a new HIPAA configuration organisation setting on HIPAA-ready Enterprise plans. Claude Code is covered via a Console API key with ZDR, or via the configuration covering Claude Code and Cowork local mode; Covered Models are now usable in local mode under the configuration (not while the org has ZDR for Claude Code unless Anthropic expressly authorises it); Skills flipped from covered to not covered; Cowork in Claude Desktop now covered, Cowork in the cloud and Dispatch not available under the configuration. Note rewritten (OAuth/remote-mode wording no longer on the page). Watch hint 'Claude Code Feature' vanished in the restructure (whole-page fallback since 2026-10-07); re-anchored to 'Use these tables to check whether' window 10000, pre-baselined into data/baa-watch.json.
  • Anthropic API2026-10-07 · watch alert 2026-10-07: minor renames, facts otherwise unchanged. The Console path for enabling HIPAA readiness was renamed Settings, Privacy to Settings > Data retention (min_tier and note updated); the Claude Code bullet was renamed Claude Code with API keys, and the Enterprise exception now reads as Claude Code having its own ZDR offering for qualified accounts. All ZDR/HIPAA-readiness facts re-verified live unchanged.
  • Anthropic API2026-09-30 · Watch alert 2026-09-30, checked against the platform docs page and the BAA article (verified_on deliberately left at 2026-09-02: the Enterprise seat price and the Enterprise tier claims, sourced from the pricing page and the HIPAA-ready Enterprise article, were not re-checked). Confirmed unchanged: HIPAA readiness self-serve in Console under Settings, Privacy with the standard BAA; negotiated BAA via Sales; permanent once enabled; Covered Models need 30-day retention; Console and betas excluded; Claude Code not covered under HIPAA readiness. Wording corrected: the docs no longer say HIPAA readiness cannot coexist with ZDR on one organisation; they call it 'an alternative to ZDR' and say an organisation handling PHI does not also need ZDR, so the note now quotes that instead of asserting a rule. The old watch window (first 3000 characters around the first 'HIPAA readiness' mention) held the docs sidebar and intro and stopped before the HIPAA section; it now anchors on 'What HIPAA readiness covers' (12000 characters, ZDR through Covered Models) with snapshots and diffs
  • Lovable2026-09-24 · watch alert 2026-09-24: page content changed since 2026-09-14; re-checked live, BAA status unchanged (still 'does not sign Business Associate Agreements and is not HIPAA-compliant', PHI upload still prohibited). Two additions folded in from an Enterprise-plan expansion: 'Extended-retention models' (Enterprise only) - workspaces use zero-data-retention models by default, admins can opt in to models with 30-day prompt/output retention via a consent dialog (zero_data_retention moves from not-verified to yes, default); and GitHub Enterprise Cloud (data residency) or GitHub Enterprise Server as new Enterprise code-residency options alongside the existing Lovable Cloud app-data regions. Business/Enterprise training-data exclusion by default unchanged
  • Amazon Bedrock (AWS)2026-09-24 · [combined row] watch alert 2026-09-24 (first since the 2026-09-02 creation): Microsoft, AWS and Google BAA availability unchanged (default/self-serve for any customer at all three); Bedrock zero-retention default and Azure's approval-gated modified abuse monitoring unchanged. One real fact change found on the AWS eligible-services page: raw-text search confirms zero occurrences of 'Fable' or 'Mythos' anywhere on the page and no exclusion bracket next to Amazon Bedrock (unlike e.g. Amazon CloudFront's bracketed exclusion, which is still present) - the earlier model-level exclusion is gone. 'Amazon Bedrock AgentCore' now also appears as its own separately-listed HIPAA-eligible service alongside Bedrock. Note updated to drop the unsupported exclusion and add AgentCore; Azure and Google portions of this combined row were not re-verified this pass, since watch.url only covers the AWS page
  • Bolt.new (StackBlitz)2026-09-23 · watch alert 2026-09-23: the privacy policy was replaced wholesale (first published 2026-09-14, last updated 2026-09-22, effective for existing accounts 2026-10-07) and the data-use facts materially changed, so the note was rewritten rather than merely re-verified. BAA status unchanged: zero BAA or HIPAA occurrences in the live policy text, other pages unchanged since the 2026-09-14 pass. Changes folded in: the 2026-05-12 flat do-not-submit-health-data clause became a conditional 'do not submit sensitive personal information unless authorized', with special-category and child-related content excluded from model development and dataset licensing; from 2026-10-07 StackBlitz may by default use Bolt Model Development Content to train its own models and build de-identified datasets licensed to third parties for compensation (opt-out free on any plan, 15-day implementation, only content created from that date eligible); EEA, UK and Switzerland accounts are excluded entirely; opt-in Bolt Forge open-weight mode makes training and dataset licensing a condition of its benefit (about USD 6.50/month data value, not offered in EEA/UK/CH). The Team/Enterprise exclusion now rides on 'a separate written agreement that addresses these uses' rather than the old flat MSA/DPA clause. Watch coverage gap flagged to Bart: the hint anchors on the Section 3.C sensitive-data clause (~char 3762) so the 3000-char window does not reach Section 5.C (~char 6530+), where the new training and licensing terms live; re-anchor proposal parked (hint to 'Bolt Model Development Content', first occurrence ~char 6634)
  • OpenAI API2026-09-23 · watch alert 2026-09-23 (first since the 2026-09-02 creation): all substantive facts hold - API data still not used for training by default (opt-in only, unchanged since 2023-03-01), 30-day abuse monitoring default, ZDR/MAM approval structure, BAA still an executed Healthcare Addendum plus a retention control, EU residency still sales-approved, Web Search guidance intact but now scoped to the Responses API web_search tool (preview variants ignore external_web_access). One rename folded in: 'Eyes Off' now reads 'Private Retention with Private Safety Processing' on the page (same control: content kept in encrypted abuse monitoring logs, excluded from human review); min_tier and note updated to the current name
  • Claude Code2026-09-18 · Fourth pass (the stored hash changed on three consecutive runs, 2026-09-16, 09-17, 09-18; the page was restructured 2026-09-17 and edited daily since): every coverage fact re-verified unchanged against the live page - CLI via the 1P API console, Enterprise OAuth and desktop local mode still covered only with ZDR on qualified accounts; desktop remote mode, web, Review, Security, Computer Use and Remote Control still excluded and ZDR-incompatible; consumer accounts still never covered. One addition from the restructure: Covered Models require 30-day data retention and are unavailable with ZDR, so Claude Code under the BAA cannot use Covered Models; note updated
  • Mistral AI2026-09-09 · Row created; verified against Mistral's own trust-centre HIPAA document (dated 2026-08-17), ZDR docs and help centre, regional-inference docs, commercial terms, DPA, subprocessor list and pricing. Status enterprise-only with the narrowest scope on the table: two covered products, US endpoint, stateless endpoints, ZDR required. Training default yes: Studio Free mode and consumer Vibe train unless opted out, Vibe Enterprise is opted out by default, and Labs or Preview models train regardless of opt-out or ZDR. The watch targets the HIPAA PDF itself (text extracted with pypdf) because the trust-centre HTML is a JavaScript app the watcher cannot read. The PDF URL carries an r= token that returns 404 when dropped and may rotate, so a first fetch-failure alert on this row should be read as a token change and re-checked by hand before assuming Mistral changed its policy
  • Claude Code2026-09-08 · Third pass (watch alert 2026-09-08): Anthropic's BAA page now lists Claude Code CLI via the 1P API console as eligible under the BAA with ZDR enabled, alongside the Enterprise OAuth and desktop local-mode routes already noted; this reverses the 2026-09-02 correction that the API's HIPAA-ready arrangement excludes Claude Code. Desktop remote mode, web, Review, Security, Computer Use and Remote Control (all beta) remain excluded and ZDR-incompatible. Note updated; re-verified against the same BAA docs page
  • Vercel2026-09-08 · Third pass (watch alert 2026-09-08): the dedicated is-vercel-hipaa-compliant KB guide now permanently redirects to the Security & Compliance Measures docs page (#hipaa section); the watch hint 'click through agreement' no longer occurs there, which is why the watcher flagged a change. BAA terms unchanged: Pro self-serve add-on still USD 350/month (re-checked live on the pricing page), Enterprise still negotiated on request, Secure Compute still offered as additional protection. Source and watch URL/hint updated to the new page
  • Bolt.new (StackBlitz)2026-09-03 · Third pass with a JavaScript-capable reader: the trust centre and bolt.new/terms carry no BAA language either, and the Privacy Policy instructs users not to submit health information, so status moves from not-verified to no. No sub-processor list URL exists on any Bolt page (the privacy policy's link target is not exposed); the cell now shows a dash instead of the privacy policy. Zero data retention stays not-verified (no statement found). Watch moved to the privacy policy sentence that carries the prohibition
  • v0 (Vercel)2026-09-03 · Third pass with a JavaScript-capable reader found the decisive text the earlier passes missed: Vercel's API Terms forbid processing Protected Health Information with the v0 API or AI Solution, and the AI Product Terms bar health information in any Input, so status moves from not-verified to no. The researcher's paid-tier verdict describes Vercel's hosting BAA, which lives in the Vercel row and never names v0; the v0 Enterprise page's 'compliance inheritance (HIPAA)' claim is contradicted by those terms. Sub-processors named for v0 at the trust centre: Cerebras, Baseten, Invisible Tools (Raindrop.ai), Groq. EU region and zero retention stay not-verified (no statement found). Watch moved to the API Terms sentence
  • Lovable2026-09-02 · Second pass: Lovable's own enterprise FAQ says it does not sign BAAs (stronger than the terms clause); DPA on Business and Enterprise; Lovable Cloud regions (Americas, Europe, Asia Pacific); training default yes for Free and Pro from 2026-09-09, excluded on Business and Enterprise; the lead's 'terms updated 2026-06-16' was wrong (that date was the Solution Partner terms; the general terms date 2026-08-28); watch moved to the enterprise FAQ
  • Lovable2026-09-02 · Row created; verified against live Terms of Service
  • Bolt.new (StackBlitz)2026-09-02 · Second pass: the first-pass 'no BAA, HIPAA not named anywhere' was contradicted by bolt.new's Enterprise and Security pages, which advertise HIPAA readiness via BYOK; no page states a BAA either way, so status moved from no to not-verified; DPA for Team and Enterprise; training default yes per the May 2026 privacy policy; HIPAA Vault dropped as a source; watch moved to the security page (the old hint never occurred on the privacy policy)
  • Bolt.new (StackBlitz)2026-09-02 · Row created; secondary-source verified, no primary BAA/HIPAA page exists to check directly
  • Base44 (Wix)2026-09-02 · Second pass against Base44's own pages: DPA available; EU or UK app-data residency on Elite and Enterprise since 2026-04-16; training licence in the terms with Enterprise opted out by default; sub-processor list is DPA Exhibit C (which omits the Langfuse and Logfire entries the security page shows); Knack dropped as a source; watch moved to the terms (the old hint never occurred on the privacy policy)
  • Base44 (Wix)2026-09-02 · Row created; secondary-source verified
  • Replit2026-09-02 · Second pass: the no-BAA statement is on Replit's own therapy-builder page (a marketing page, not the docs the first pass cited) and covers standard hosting only; DPA (April 2026); published apps US-hosted with EU on request for Enterprise; training default no for Customer Content under the Commercial Agreement, public Repls are used; Paubox dropped as a source; watch moved to the page carrying the statement
  • Replit2026-09-02 · Row created; secondary-source verified
  • v0 (Vercel)2026-09-02 · Second pass: the first-pass claim that Vercel support had confirmed v0 sits outside the BAA had no source on vercel.com or v0.app and was dropped; no page states BAA coverage for v0 either way, while v0 Enterprise advertises HIPAA compliance inheritance, so status moved from no to not-verified; DPA covers v0 as a Vercel AI service (June 2026 legal update); training default by plan from the pricing page and AI Policy; watch moved to the v0 enterprise page (the old hint never occurred on the KB guide)
  • v0 (Vercel)2026-09-02 · Row created; secondary-source verified
  • Cursor2026-09-02 · Second pass against Cursor's own pages: DPA applies to Teams and Enterprise only (individual plans excluded); data residency is US-only with EU inference on request; sub-processor list lives at trust.cursor.com; zero data retention with model providers under Privacy Mode; training needs explicit agreement per the August 2026 terms. Note corrected: integrations and own API keys sit outside the BAA
  • Cursor2026-09-02 · Row created; verified against Cursor's own BAA docs page
  • Claude Code2026-09-02 · Second pass: DPA (SCCs incorporated), sub-processor list URL and zero data retention for qualified commercial accounts verified; data residency stays US or global only. Note corrected: the API's HIPAA-ready arrangement does not extend to Claude Code, and Free, Pro and Max accounts are never covered
  • Claude Code2026-09-02 · Row created; verified against Anthropic's own BAA docs page
  • Vercel2026-09-02 · Second pass: the Pro BAA is a paid add-on at USD 350/month (pricing page), which the first pass omitted; the changelog is dated 9 September 2025, not 2026; sub-processor list is the security.vercel.com trust centre, not the DPA; EU-region caveat added from vercel.com/security
  • Vercel2026-09-02 · Row created; verified against Vercel's own knowledge base and changelog
  • Netlify2026-09-02 · Second pass: dropped the unsupported 'announced 2024' (page undated); DPA dated June 2026 verified; sub-processor list URL corrected to /legal/subprocessors/; EU Functions regions on Pro and Enterprise; Database Services scope caveat added
  • Netlify2026-09-02 · Row created; verified against Netlify's own announcement
  • Supabase2026-09-02 · Second pass: the USD 350/month add-on figure appears only in third-party blogs, not on supabase.com, so the price now reads 'not published'; HIPAA Vault dropped as a source in favour of Supabase's pricing, security and HIPAA docs; watch moved from the DPA to the pricing page
  • Supabase2026-09-02 · Row created; price figure cross-checked across three independent sources
  • Firebase / Google Cloud2026-09-02 · Second pass: the BAA is click-to-accept in the Cloud console for any project, not an enterprise agreement (status paid-tier to yes); Covered Products re-read (Cloud Storage and Identity Platform added; Hosting, Realtime Database and Authentication not listed); Firebase Authentication is US-only; the watch hint 'Firebase' never occurs on the target page, now 'Firestore'; Accountable dropped as a source
  • Firebase / Google Cloud2026-09-02 · Row created; covered-services caveat verified against Google's own compliance page
  • OpenAI API2026-09-02 · Second pass: minimum tier now names the three approved retention controls (Zero Data Retention, Eyes Off, Safety Retention) that make BAA-eligible endpoints usable for PHI; the ChatGPT-consumer sentence had no fetchable primary source (openai.com and help.openai.com block automated fetches) and was dropped; EU data residency confirmed as sales-approved; sub-processor list URL taken from the DPA
  • OpenAI API2026-09-02 · Row created; verified against OpenAI's own data-controls documentation
  • Anthropic API2026-09-02 · Second pass: API HIPAA readiness is self-serve since July 2026 (Console, standard BAA; permanent; cannot coexist with ZDR on one organisation); Enterprise seat price USD 20 published; sub-processor list URL and ZDR on request verified; watch moved to the platform docs page, which changed with the self-serve release while the privacy article still carries the older Sales wording
  • Anthropic API2026-09-02 · Row created; verified against Anthropic's own BAA documentation, correcting the initial lead of a flat no
  • Amazon Bedrock (AWS)2026-09-02 · [combined row] Second pass: BAAs are default or self-serve for any customer at all three (status paid-tier to yes); AWS lists Bedrock excluding the Fable and Mythos models; Google now brands Vertex AI as Gemini Enterprise Agent Platform; zero retention verified for Bedrock (default) and Azure (approval-gated), Google's page could not be fetched; two secondary sources replaced by nine vendor pages; watch moved to the dated AWS eligible-services page; sub-processor URL now AWS's dated list (Microsoft's sits behind a JS portal)
  • Amazon Bedrock (AWS)2026-09-02 · [combined row] Row created as a combined teaching row; per-provider eligible-services lists not individually re-verified this pass
  • Clerk2026-09-02 · Second pass: the BAA is Enterprise-only per the pricing table (Free, Pro and Business: No), not a paid-plan add-on (status paid-tier to enterprise-only); no region selection, all data US-hosted; sub-processor list URL corrected; the unsupported 'custom security questionnaires' clause dropped
  • Clerk2026-09-02 · Row created; verified against Clerk's own pricing page; exact BAA add-on price not published, left not-verified
  • Resend2026-09-02 · Second pass: EU region is no (sending region selectable, stored data US-only per Resend's regions doc and GDPR page); sub-processor list URL corrected (22 entries, all US, including Anthropic PBC); both BAA statements re-verified against the August 2026 pages
  • Resend2026-09-02 · Row created; corrected from an initial "unverified" lead to enterprise-only after finding Resend's own contradicting GDPR FAQ vs Enterprise Terms
  • GitHub2026-09-02 · Second pass: the site-policy DPA URL now redirects to an index, so the watch targets the customer-terms DPA, whose section 12 forbids PHI (the first-pass note wrongly said no GitHub page mentions HIPAA); sub-processor list URL corrected; EU data residency on GitHub Enterprise Cloud; training set to no for repository content, with the AI-feature opt-out caveat
  • GitHub2026-09-02 · Row created; verified by absence of any HIPAA/BAA mention on GitHub's own site-policy pages