Hi @needbaa 

reCAPTCHA itself is generally not considered a service that requires a Business Associate Agreement (BAA) under HIPAA. However, it's crucial to verify this with your account manager. They can confirm whether reCAPTCHA's specific implementation and data handling practices align with HIPAA requirements in your particular case.

Thanks @ErikaB. I have sent several contact forms for a call on this with my account manager but have yet to hear anything. Is there a recommended way to reach them? 

@needbaa  

I would suggest reaching out to reCaptcha Enterprise support.  They should be able to assist.