HIPAA-Compliant DevOps & Monitoring Vendors

DevOps & Monitoring vendors are evaluated against HIPAA when they handle the workflows this framework governs. Currently, 13 vendors in our DevOps & Monitoring category hold HIPAA certification and 6 hold it partially or conditionally. Each listing below links to the vendor's full compliance profile.

DevOps & Monitoring vendors that hold HIPAA certification

Datadog logo

Datadog

17/32

Cloud monitoring and analytics platform for infrastructure, applications, and logs.

Listed on Datadog Trust Center

MongoDB Atlas logo

MongoDB Atlas

17/32

Fully managed cloud database service with multi-cloud support.

Listed on MongoDB Trust Portal

Mendix logo

Mendix

13/32

Low-code application development platform, owned by Siemens.

Freshservice logo

Freshservice

10/32

IT service management (ITSM) platform from Freshworks.

Freshworks commitment to HIPAA compliance documented for eligible products

Google Apigee logo

Google Apigee

10/32

API management platform, part of Google Cloud.

Postman logo

Postman

9/32

API platform for building, testing, and documenting APIs.

JFrog logo

JFrog

7/32

DevOps platform for artifact management, binary repositories, and software supply chain security.

Referenced elsewhere on site regarding regulatory standards, not itemized on the certificate program page

New Relic logo

New Relic

6/32

Observability and application performance monitoring (APM) platform.

HIPAA-enabled capabilities for eligible accounts

MuleSoft logo

MuleSoft

6/32

Integration and API management platform (Anypoint Platform), part of Salesforce.

Bitbucket logo

Bitbucket

5/32

Git-based source code repository and CI/CD platform from Atlassian.

Atlassian Cloud offers HIPAA-compliant solutions

LaunchDarkly logo

LaunchDarkly

5/32

Feature management and experimentation platform for software delivery.

Enables customer HIPAA compliance

Rollbar logo

Rollbar

5/32

Real-time error monitoring and crash reporting platform for applications.

Compliant SaaS solution with BAA

Supabase logo

Supabase

4/32

Open-source Firebase alternative with PostgreSQL database, auth, and storage.

HIPAA compliant with BAA available for enterprise/team plans

Honeycomb logo

Honeycomb

4/32

Observability platform for distributed tracing and debugging production systems.

BAA available for eligible customers

OutSystems logo

OutSystems

4/32

Low-code application development platform.

Available to Sentry-entitled (higher tier) customers

Kong logo

Kong

4/32

API gateway and AI/API connectivity platform.

Sentry logo

Sentry

3/32

Application monitoring and error-tracking platform for developers.

Attestation

ManageEngine logo

ManageEngine

3/32

IT management software suite (ITSM, endpoint, network, security), part of Zoho.

SOC 2 + HIPAA Type 2 for specific products (ServiceDesk Plus, Endpoint Central, ADManager Plus)

ConnectWise logo

ConnectWise

2/32

Business management and RMM/PSA software suite for MSPs.

BAA available for covered services on request

These devops & monitoring vendors do not currently hold HIPAA certification:

Know a vendor we're missing?

Data sourced from public trust centers. Not legal or compliance advice.

Logos and trademarks are property of their respective owners. Use does not imply endorsement, affiliation, or sponsorship.

© Compliance Posture 2026