A HIPAA covered entity's BAA with Anthropic covers PHI in API prompts. — Enterprise Platform Lead Practice — Claude Cert Academy

A HIPAA covered entity's BAA with Anthropic covers PHI in API prompts. Which of the following is NOT covered by this BAA?

• Prompts containing patient names sent through the API
• PHI logged to the org's own application servers
• Completions that include diagnosis information
• API requests routed through Anthropic's network

Answer: PHI logged to the org's own application servers

The BAA covers PHI that Anthropic processes — prompts and completions in transit through the API. PHI that the org logs to its own servers is the org's responsibility; the BAA does not extend to the org's internal logging infrastructure.

Continue to Claude Cert Academy