HIPAA-Compliant Finance & Payments Vendors
Finance & Payments vendors are evaluated against HIPAA when they handle the workflows this framework governs. Currently, 3 vendors in our Finance & Payments category hold HIPAA certification and 2 hold it partially or conditionally. Each listing below links to the vendor's full compliance profile.
Finance & Payments vendors that hold HIPAA certification
Ramp
7/32Corporate cards, spend management, and bill pay platform.
HIPAA-supporting safeguards not publicly documented; no public BAA statement found.
QuickBooks Online
7/32Cloud accounting and bookkeeping software for small and mid-sized businesses, from Intuit.
Zuora
7/32Subscription management, billing, and revenue platform for recurring-revenue businesses.
Sage Intacct
6/32Cloud financial management and accounting platform for mid-sized businesses.
Chargebee
4/32Subscription management and recurring billing platform.
Addressed via separate guidance documents, not a formal downloadable certificate
These finance & payments vendors do not currently hold HIPAA certification:
- Brex
- Bill.com
- Stripe
- PayPal
- Square
- Xero (not documented)
- FreshBooks (not documented)
- Wave Accounting (not documented)
- Expensify (not documented)
- Divvy (not documented)
- Recurly (not documented)
- Avalara (not documented)
- TaxJar (not documented)
- Bench Accounting (not documented)
- Pilot.com (not documented)
- Melio (not documented)
- Tipalti (not documented)
- Airwallex (not documented)
- Recharge (not documented)
- Klarna (not documented)
- Afterpay (not documented)
- Affirm (not documented)
- LawPay (not documented)
- Adyen (not documented)
- Braintree (not documented)
- Checkout.com (not documented)
- Wise (not documented)
- Revolut Business (not documented)
- Plaid (not documented)
- Marqeta (not documented)
- GoCardless (not documented)
Know a vendor we're missing?