# Can Grok bot be HIPAA Compliant later down the line? **URL:** \ **Category:** Help\ **Tags:** grok-bot, security, teams-enterprise\ **Created:** [August 20, 2026, 2:45am UTC](https://forum.cursor.com/t/can-grok-bot-be-hipaa-compliant-later-down-the-line/168921 "2026-08-20T02:45:02Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![NIEREIN](https://avatars.discourse-cdn.com/v4/letter/n/b487fb/32.png) [@NIEREIN](https://forum.cursor.com/u/NIEREIN)\ **Post date:** [August 20, 2026, 2:45am UTC](https://forum.cursor.com/t/can-grok-bot-be-hipaa-compliant-later-down-the-line/168921/1 "2026-08-20T02:45:02Z")
Cursor signs BAAs on Enterprise, but they only cover “Eligible Services” and I can’t tell from the docs whether Grok Bot is one. Bot runs on its own cloud VM and keeps you logged into your tools, so anything it touches lands there. Three things I’m trying to figure out: 1. Is Bot covered under the Enterprise BAA today? 2. If not, is it planned? 3. If it’s not planned, is it something negotiable into an Enterprise agreement. Or is Bot out of scope until the infrastructure side catches up? ---
**Author:** ![Colin](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/colin/32/90452_2.png) [@Colin](https://forum.cursor.com/u/Colin)\ **Post date:** [August 20, 2026, 8:45am UTC](https://forum.cursor.com/t/can-grok-bot-be-hipaa-compliant-later-down-the-line/168921/5 "2026-08-20T08:45:52Z")
Hey @NIEREIN This is a question best suited for our [sales team](https://cursor.com/contact-sales?source=enterprise_hero). Please get in touch with team! ---
**Author:** ![Colin](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/colin/32/90452_2.png) [@Colin](https://forum.cursor.com/u/Colin)\ **Post date:** [August 20, 2026, 8:45am UTC](https://forum.cursor.com/t/can-grok-bot-be-hipaa-compliant-later-down-the-line/168921/6 "2026-08-20T08:45:56Z")