How to Revoke a HIPAA/BAA Agreement

Available on: Mac, Windows. For personal agreements: A BAA can be signed on iOS, but it can only be revoked from the desktop app.

No longer need your HIPAA Business Associate Agreement (BAA) with Wispr Flow? For an eligible personal account, revoke it in desktop settings and optionally save a signed copy first.

How to revoke your BAA

These steps apply to individual (personal) BAAs, including a personal BAA signed before joining an enterprise. Your current subscription—not organization membership alone—determines the individual or Org-wide HIPAA layout: without an active Business/Enterprise subscription, you see individual controls. Organizations with live billing require admin management instead; self-serve signing and revoking are blocked even if individual buttons appear.

BAA status belongs to your account, not your device, so use the same account on desktop if you signed on iOS. On iOS, a signed BAA locks Privacy Mode on and Cloud Sync off.

Warning: Revoking has no confirmation prompt and takes effect immediately in this desktop app, even if account-status updates are delayed. Sign a new BAA before resuming workflows that require one.

Open the Wispr Flow desktop app on Mac or Windows.
Go to Settings → Data and Privacy.
Download a copy first, if wanted, using Download signed BAA when available.
Click Revoke BAA beside HIPAA enabled.

Success shows “HIPAA BAA revoked successfully”; the personal row changes to Enable HIPAA with View and accept.

If the message blocking Dictation cloud storage or Notetaker offers a revoke action, you can use it instead. It uses the same success and error messages as Settings and closes after a successful revoke.

How to download your signed BAA

Signed-copy downloads are for individual (non-enterprise) users. If offered in your settings, Download signed BAA appears once a signer name is recorded, which can take up to a minute after signing.

The button shows a loading state and is disabled while preparing HIPAA-BAA-signed.pdf. The PDF contains the agreement and a Signature Record page showing Signed by, Email and Date; that page is for reference, not a legal certificate.

“Couldn't download the signed agreement” means no partial file was saved. Signing out or switching accounts during a download also discards the file.

Check your network connection.
Sign back into the original account if you signed out or switched accounts.
Retry Download signed BAA; a saved PDF confirms success.

If you see “Error revoking HIPAA BAA”

The revoke did not take effect; this error also appears if no active BAA remains. The button stays available, but rapid repeated signing or revoking attempts can be temporarily blocked.

Wait briefly before clicking Revoke BAA again.

If the success message appears, you're done; otherwise, contact support.

If only one HIPAA button appears

The single-button layout shows HIPAA enabled → Revoke BAA or Enable HIPAA → View and accept. It has no download, Org-wide HIPAA row or admin-portal buttons; enterprise billing restrictions still apply.

What changes after revoking

Signing a personal BAA turns Privacy Mode on and turns Dictation cloud storage and data sharing off for your account. Revoking removes personal-BAA enforcement but does not restore those settings: storage and sharing stay off until you enable them.

Dictation cloud storage: Where available, this setting is locked off by a personal or org BAA: “Dictation Cloud Storage is locked off because HIPAA BAA is signed.” An organization storage-policy lock instead shows “This setting is managed by your organization.”
Improve the model for everyone: A personal BAA locks sharing off: “Your HIPAA agreement does not allow data to be used for model training.” With an org-only BAA, organization policy controls sharing; a policy lock shows “Your organization does not allow data to be used for model training.”

A personal or org BAA blocks Notetaker recording. After revocation, the desktop app immediately reassesses Notetaker availability; to use it, turn on Dictation cloud storage in Data and Privacy if unlocked. Data sharing remains optional.

Where Scratch Pad sync depends on Dictation cloud storage, turning storage off stops notes syncing across desktop and mobile; the sync button shows “Turn on Dictation Cloud Storage to sync notes.”

If Notetaker transcript retention is available, storage must be on to change it; otherwise it shows “Turn on Dictation Cloud Storage to set transcript retention.” An admin-set retention policy takes precedence and shows “Set by your admin.”

Revoking marks your BAA as revoked rather than deleting it. BAA records are not part of your data export and remain retained after usage-data deletion or account deletion.

Enterprise accounts

If you see Org-wide HIPAA, the controls depend on your role. Neither enterprise row offers Download signed BAA; contact your admin or use the portal for agreement records.

Admins: Manage the org BAA through Admin Portal, not the desktop app. When signed, View signed BAA opens the agreement externally alongside the Admin Portal button; when unsigned, only Admin Portal appears. Signing requires an active enterprise subscription; signing and revoking also depend on eligibility, so not every admin can manage a BAA.
Non-admin members: Open admin portal opens the portal and is the only button. Members cannot revoke the org BAA or download or view the signed agreement from this row.

An org BAA keeps storage and Notetaker locked after a personal revoke; only an eligible admin can revoke it. Organization policies may still restrict settings afterward. When organization agreements take precedence, a personal BAA may be treated as unsigned; personal revocation does not remove organization restrictions.

Organization policy can also restrict Local data storage, showing “This setting is managed by your organization.” or “Some options are restricted by your organization.”

Sign again after revoking

How to sign again after revoking

The HIPAA Business Associate Agreement dialog requires only your legal name, with no checkbox.

Note: The dialog says “This action cannot be undone”, but Revoke BAA remains available after signing.

Click View and accept beside Enable HIPAA in Data and Privacy.
Open the “HIPAA Business Associate Agreement.” link to read the full agreement in your browser.
Enter your legal name.
Click I agree.

Success shows “HIPAA BAA signed successfully”; failure shows “Error signing HIPAA BAA”.

Still need help?

Contact support if revoking fails after a paused retry, downloads still fail after the checks above, or an admin cannot manage the org BAA. Include your platform, device, account type, exact error and steps tried.