HIPAA-Compliant Marketing Vendors
Marketing vendors are evaluated against HIPAA when they handle the workflows this framework governs. Currently, 3 vendors in our Marketing category hold HIPAA certification and 2 hold it partially or conditionally. Each listing below links to the vendor's full compliance profile.
Marketing vendors that hold HIPAA certification
Marketo
8/32Marketing automation platform, now Adobe Marketo Engage within Adobe Experience Cloud.
Not offered as a HIPAA-eligible product by Adobe
Optimizely
7/32Digital experience and experimentation (A/B testing) platform.
Supported per compliance page
ActiveCampaign
3/32Customer experience automation platform combining email marketing, marketing automation, and CRM.
Vendor states HIPAA compliance focus; BAA available
Braze
3/32Customer engagement platform for cross-channel messaging (push, email, SMS, in-app).
HIPAA safeguards documented for eligible customers with BAA
Oracle Eloqua
0/32B2B marketing automation platform running on Oracle Cloud Infrastructure.
OCI supports HIPAA workloads; not confirmed specifically for Eloqua
These marketing vendors do not currently hold HIPAA certification:
- Mailchimp
- Constant Contact (not documented)
- Klaviyo (not documented)
- Iterable (not documented)
- Brevo (not documented)
- Campaign Monitor (not documented)
- SharpSpring (not documented)
- Salesforce Pardot (not documented)
- Semrush (not documented)
- Ahrefs (not documented)
- Moz (not documented)
- Hootsuite (not documented)
- Buffer (not documented)
- Sprout Social (not documented)
- Later (not documented)
- Instapage (not documented)
- VWO (not documented)
- MailerLite (not documented)
- Omnisend (not documented)
- Unbounce
Know a vendor we're missing?