HIPAA/GDPR and API Calls

Anyone building anything that requires HIPAA or GDPR compliance, where you need an Enterprise Account from Anthropic to get agreements in place to cover you for those regulatory things?

I was talking to someone that might want me to build something, but they need it to be HIPAA compliant. Which I totally get. I know I can get a BAA agreement on an Enterprise account to cover HIPAA stuff, but is that a general coverage for all occurrences of a client that needs HIPAA or do I need a new agreement with Anthropic for each HIPAA or GDPR type client?

I was just checking to see if anyone has run into that before I talk to Anthropic about it.

12 comments