How to sign BAA for HIPAA compliance with Microsoft?

Question

There are a few questions around this topic, yet none of them are answered clearly.

We, a startup with no previous business relationship with Microsoft, would like use Azure OpenAI service to analyze medical data potentially containing PHI with OpenAI's GPT-4 model.

Two questions:

1. Is Azure OpenAI service HIPAA compliant?
2. If yes, how do we get a BAA with Microsoft?

Thanks!

Answer 1

Hello @max

Thanks for reaching out to us, yes, Azure OpenAI service is HIPAA compliant, please refer to the document here -https://azure.microsoft.com/en-us/resources/microsoft-azure-compliance-offerings/en-us/

Below screenshot for your quick reference -

For your question 2, you’ll need to speak to your sales representative, we don't require an agreement, if you are a managed account, you can speak with account team.

I hope this helps, please let me know if you need more information.

Regards,

Yutong

-Please kindly accept the answer and vote 'Yes' if you feel helpful to support the community, thanks a lot.