We plan to use Power Automate Desktop to build attended RPA bots to pass data from SharePoint lists to a separately BAA covered SaaS solution that does not have an API. We need to verify that the tool Power Automate Desktop is covered in the standard BAA agreement and have not been able to find anything confirming or denying.
Microsoft’s official compliance documentation and Business Associate Agreement details do not explicitly list Power Automate Desktop (PAD) as a covered service under the standard Microsoft BAA.
The BAA typically covers Microsoft cloud services such as Power Automate cloud flows, SharePoint Online, and other Microsoft 365 workloads, but PAD runs locally on user devices and is not explicitly included.
PAD, which runs locally on user devices, is not identified as a BAA-covered service by default. This means that while Power Automate cloud flows can be used in HIPAA-compliant scenarios under the BAA, PAD itself does not have this explicit coverage.
I am sure some clues I tried to give. If these clues help to resolve the issue brought you by here, please don't forget to check the box Does this answer your question? At the same time, I am pretty sure you have liked the response!
Was this reply helpful?YesNo
Under review
Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.