HIPAA-Compliant Infrastructure & Cloud Vendors
Infrastructure & Cloud vendors that hold HIPAA certification
Google Cloud Platform
23/32Google's suite of cloud computing services running on the same infrastructure Google uses for its products.
HIPAA is a regulation. Google Cloud offers BAA and HIPAA-eligible services.
Microsoft Azure
23/32Microsoft's cloud computing platform for building, deploying, and managing applications and services.
HIPAA is a regulation. Azure offers BAA via Microsoft Product Terms and HIPAA/HITRUST built-in policy initiative.
Amazon Web Services
21/32On-demand cloud computing platforms (IaaS/PaaS) offering compute, storage, and managed services.
HIPAA is a regulation. AWS offers standardized BAA and HIPAA-eligible services.
Cloudflare
20/32Global CDN, DDoS mitigation, DNS, Zero Trust, and edge computing services delivered over Cloudflare's network.
HIPAA/HITECH: Cloudflare can sign BAAs for enterprise customers using its security products.
Vultr
12/32Cloud infrastructure provider (VPS, bare metal, GPU compute) for developers.
Redis Cloud
12/32Fully managed in-memory database and caching service.
Vercel
10/32Frontend cloud platform for deploying and scaling web applications, built on AWS infrastructure.
HIPAA compliance as Business Associate. annual audit completed and BAAs signed with eligible customers.
DigitalOcean
10/32Cloud infrastructure provider offering compute, storage, and networking services for developers and startups.
HIPAA eligibility documented (BAA available for eligible workloads), digitalocean.com/trust and digitalocean.com/trust/certification-reports, checked 2026-09-06
Veeam
10/32Data backup, recovery, and cyber resilience software.
Netlify
9/32Web development platform for building, deploying, and scaling modern websites and applications.
HIPAA compliance via enterprise service offering with executed BAA, netlify.com/security/ and trust-center.netlify-corp.com (SafeBase), checked 2026-09-06
Rubrik
9/32Data security and cyber resilience platform (backup, ransomware recovery).
Elasticsearch
8/32Search and analytics engine, offered as Elastic Cloud.
Druva
8/32SaaS-based data resiliency and backup platform.
Firebase
7/32Google's app development platform (backend, database, hosting, analytics).
BAA available for a subset of Firebase services under Google Cloud
Acronis
6/32Cyber protection platform combining backup, disaster recovery, and security.
Wasabi
6/32Cloud object storage service.
Fastly
5/32Edge cloud platform for CDN, security, and edge compute.
Audited against Security and Privacy Rules
Backblaze
5/32Cloud storage and backup service (B2 Cloud Storage, Computer Backup).
PlanetScale
4/32Managed MySQL-compatible serverless database platform.
Render
4/32Cloud application hosting platform (PaaS).
HIPAA-enabled workspaces available for handling US health data
Railway
3/32Cloud application deployment platform (PaaS).
HIPAA BAA available as an add-on under a shared-responsibility model
Carbonite
2/32Cloud backup and data protection software, part of OpenText.
BAA available with Carbonite Safe Pro subscription
Fly.io
2/32Application hosting platform for deploying apps close to users globally.
Pre-signed BAA available for HIPAA apps
These infrastructure & cloud vendors do not currently hold HIPAA certification:
Know a vendor we're missing?