HIPAA-Compliant ERP & Operations Vendors
ERP & Operations vendors that hold HIPAA certification
Microsoft Dynamics 365
15/32Cloud-based ERP and CRM business applications suite.
Oracle ERP Cloud
10/32Cloud-based enterprise resource planning suite, part of Oracle Fusion Cloud.
SAP S/4HANA
7/32Enterprise resource planning (ERP) suite, available cloud or on-premise.
Supported via BAA depending on deployment; not a blanket certification
Certinia
5/32ERP and professional services automation software built on Salesforce (formerly FinancialForce).
Complies with HIPAA Security Rule as a business associate
Clio
4/32Cloud-based legal practice management software.
MyCase
4/32Cloud-based legal case and practice management software, part of the 8am (AffiniPay) family.
Infor
4/32Cloud-based industry-specific ERP software suite.
Attested for multiple, but not all, Infor products
PracticePanther
1/32Cloud-based legal practice management software for law firms, part of AppFolio.
Compliant with HIPAA standards; content stored via Box.com
These erp & operations vendors do not currently hold HIPAA certification:
- SAP (not documented)
- Oracle NetSuite (not documented)
- ShipStation (not documented)
- ShipBob (not documented)
- Epicor (not documented)
- Acumatica (not documented)
- IFS (not documented)
- Odoo (not documented)
- Flexport (not documented)
- project44 (not documented)
- FourKites (not documented)
- Samsara (not documented)
- Motive (not documented)
- Onfleet (not documented)
Know a vendor we're missing?