What is HIPAA?
The US Health Insurance Portability and Accountability Act sets safeguards for protected health information (PHI). Vendors typically support it by signing a Business Associate Agreement (BAA).
HIPAA (US Healthcare) is tracked across the 422 vendors in our directory. Buyers frequently require it from vendors during procurement, and compliance is typically demonstrated through independent audits, official registries, or formal certifications. Timeframes vary. Most organizations plan months, not weeks, to prepare, be audited, and certify. For exact requirements, refer to the official HIPAA program ↗.
Vendors with HIPAA
98Analytics
Artificial Intelligence
Communication
Customer Support
Data Engineering
Design & Creative
DevOps & Monitoring
Education & Learning
ERP & Operations
Finance & Payments
Governance, Risk & Compliance
HR & People Ops
Infrastructure & Cloud
Marketing
Productivity & Docs
Project Management
Security
Websites & CMS
Partial or conditional
69These vendors meet it under specific conditions. Hover a card for the condition, or see their profiles.
Amazon Web Services
HIPAA is a regulation. AWS offers standardized BAA and HIPAA-eligible services.
21/32
Google Cloud Platform
HIPAA is a regulation. Google Cloud offers BAA and HIPAA-eligible services.
23/32
Microsoft Azure
HIPAA is a regulation. Azure offers BAA via Microsoft Product Terms and HIPAA/HITRUST built-in policy initiative.
23/32
Cloudflare
HIPAA/HITECH: Cloudflare can sign BAAs for enterprise customers using its security products.
20/32
Vercel
HIPAA compliance as Business Associate. annual audit completed and BAAs signed with eligible customers.
10/32
Netlify
HIPAA compliance via enterprise service offering with executed BAA, netlify.com/security/ and trust-center.netlify-corp.com (SafeBase), checked 2026-09-06
9/32
DigitalOcean
HIPAA eligibility documented (BAA available for eligible workloads), digitalocean.com/trust and digitalocean.com/trust/certification-reports, checked 2026-09-06
10/32
Slack
Configurable, incl. e-PHI (Enterprise-grade configuration)
18/32
Notion
Requires Enterprise-grade features + signed BAA
11/32
Asana
Enterprise tier + BAA
12/32
Confluence
Enterprise configuration
16/32
Jira
Enterprise configuration
16/32
Linear
BAA available via sales
3/32
Miro
Enterprise plan + BAA
11/32
Mixpanel
Not documented. no public BAA/HIPAA support documentation found
7/32
Looker
Google Cloud supports HIPAA with BAA. explicit Looker coverage in BAA not confirmed publicly
12/32
Gusto
HIPAA-supporting safeguards not publicly documented; no public BAA statement found.
2/32
Deel
HIPAA-supporting safeguards not publicly documented; no public BAA statement found.
7/32
Ramp
HIPAA-supporting safeguards not publicly documented; no public BAA statement found.
7/32
1Password
AgileBits is not defined as a Business Associate pursuant to HIPAA nor subject to a BAA
9/32
Zendesk
Requires purchase of Advanced Security or Advanced Compliance add-on and execution of BAA
14/32
Intercom
HIPAA compliant only on Expert plan with proper configuration and BAA execution
10/32
Twilio
BAA available with Security Edition or Enterprise Edition
11/32
Microsoft 365
HIPAA/HITECH offering; BAA available
21/32
Zoom
Available with BAA on eligible plans
11/32
Microsoft Teams
HIPAA/HITECH BAA offering
21/32
Adobe Creative Cloud
HIPAA-ready with BAA
11/32
Dropbox
HIPAA/HITECH support with BAA on eligible plans
11/32
Trello
Enterprise configuration
16/32
DocuSign
BAA available; not independently audited like SOC 2
9/32
Palo Alto Networks
BAA supported on select products; not listed as a formal certification on trust center page
10/32
Freshsales
Freshworks commitment to HIPAA compliance documented for eligible products
10/32
Marketo
Not offered as a HIPAA-eligible product by Adobe
8/32
Oracle Eloqua
OCI supports HIPAA workloads; not confirmed specifically for Eloqua
0/32
Freshdesk
Freshworks commitment to HIPAA compliance documented for eligible products
10/32
Freshservice
Freshworks commitment to HIPAA compliance documented for eligible products
10/32
Paychex
Referenced in employee training context only, not as a formal certification
3/32
TriNet
TriNet maintains an internal HIPAA compliance framework
2/32
HiBob
Referenced via footer badge; not detailed further
3/32
Dialpad
HIPAA-ready with BAA available; not a formal certification
5/32
Cisco Duo
Supports HIPAA use cases (protects PHI access); not itself a HIPAA certification
1/32
Chargebee
Addressed via separate guidance documents, not a formal downloadable certificate
4/32
New Relic
HIPAA-enabled capabilities for eligible accounts
6/32
JFrog
Referenced elsewhere on site regarding regulatory standards, not itemized on the certificate program page
7/32
Check Point
Referenced in compliance solutions navigation
2/32
Power BI
HIPAA/HITECH offering; BAA available
19/32
Adobe Analytics
HIPAA ready is claimed at the Experience Cloud level and requires a signed BAA. Adobe's HIPAA-Ready Services list names Customer Journey Analytics, not Adobe Analytics
9/32
Firebase
BAA available for a subset of Firebase services under Google Cloud
7/32
Coda
Enterprise plan only and requires a signed BAA. Third-party Packs, Connectors, and Coda Brain are not covered
7/32
PandaDoc
HIPAA-compliant plan available with BAA
2/32
OutSystems
Available to Sentry-entitled (higher tier) customers
4/32
Infor
Attested for multiple, but not all, Infor products
4/32
SAP S/4HANA
Supported via BAA depending on deployment; not a blanket certification
7/32
ManageEngine
SOC 2 + HIPAA Type 2 for specific products (ServiceDesk Plus, Endpoint Central, ADManager Plus)
3/32
ConnectWise
BAA available for covered services on request
2/32
Carbonite
BAA available with Carbonite Safe Pro subscription
2/32
Formstack
HIPAA-compliant plan/BAA offered for healthcare forms
0/32
Sitecore
Partial per the vendor's trust center; the specific condition is not detailed there.
3/32
Pendo
Partial per the vendor's trust center; the specific condition is not detailed there.
3/32
Render
HIPAA-enabled workspaces available for handling US health data
4/32
Railway
HIPAA BAA available as an add-on under a shared-responsibility model
3/32
Fly.io
Pre-signed BAA available for HIPAA apps
2/32
Anthropic
BAA available for eligible enterprise customers
4/32
Cohere
Available for custom model development only, via BAA
5/32
Hugging Face
BAA available via Enterprise plan
2/32
PostHog
HIPAA guidance documented for eligible plans
1/32
Clerk
BAA available on Enterprise plan
4/32
WorkOS
BAA available for enterprise-plan customers
3/32
Resend
Reported as in progress, not yet fully certified
2/32
Not certified
20Analytics
Communication
E-Commerce
HR & People Ops
Project Management
235 unverified
For these vendors, HIPAA status is not publicly documented. That does not mean they lack the certification.
15FiveA-LIGNAcumaticaAdobe CommerceAdobe XDADPAdyenAffirmAfterpayAhrefsAirbyteAirwallexAkamaiAlchemerAppDynamicsApplitoolsAvalaraBambooHRBasecampBench AccountingBetterworksBetty BlocksBigCommerceBlackboardBraintreeBrevoBrowserStackBubbleBufferBugsnagCampaign MonitorCeridian DayforceCheckmarxCheckout.comChorus.aiCircleCIClariClayCloseConstant ContactContentfulContractPodAiCopperCornerstone OnDemandCoursera for BusinessCraftCrazy EggCulture AmpCybereasonCypress.ioDarktraceDashlaneDatto RMMDiscordDivvyDriftEcwidEpicorESETEvernoteExpensifyFivetranFlexportFourKitesFramerFreshBooksFrontFullStoryGitGuardianGitLabGladlyGlideGoCardlessGorgiasGoTo MeetingGrafana CloudGreenhouseGrooveGroqHeapHeightHerokuHootsuiteHotjarHyperproofiCIMSIFSInstapageInstructure CanvasInVisionIterableIvantiJazzHRJenkinsJira Service ManagementJumpCloudJuroJustworksKaseyaKayakoKeapKeeper SecurityKenticoKinstaKlarnaKlaviyoKnowBe4KustomerLaceworkLaikaLambdaTestLastPassLaterLatticeLawPayLeverLinkedIn LearningLinodeLiveChatLogicGateLogRocketLoomLucidchartLushaMailerLiteMakeMalwarebytesMarqetaMcAfeeMelioMetricStreamMistral AIMotiveMozn8nNamelyNimble CRMNinjaOneOdooOmnisendOneLoginOneTrustOnfleetOpenAIOracle NetSuiteOrca SecurityPaylocityPerplexity AIPersonioPilot.comPing IdentityPlaidPodioPrestaShopproject44ProofHubProofpointQualtricsQualysRapid7Re:amazeRechargeRecurlyRemote.comResolverRetoolRevolut BusinessRSA ArcherSalesforce PardotSalesloftSamsaraSanity.ioSAPSauce LabsScale AIScytaleSeamless.aiSecureframeSemgrepSemrushSentinelOneServiceNowSharpSpringShipBobShipStationShopwareSketchSkillsoftSmartRecruitersSnykSoftrSolarWindsSonarQubeSophosSprintoSprout SocialSquarespaceStrapiSugarCRMSurveyMonkeySymantecTailscaleTalentLMSTaxJarTeamwork.comTenableTestRailThoropassTidioTipaltiTodoistTogether AITravis CITrustArcTykUdemy BusinessUKGVeracodeVMware Carbon BlackVolusionVonageVWOWave AccountingWebflowWherebyWireWiseWixWooCommerceWordPress VIPWorkableWP EngineWrikeXeroZapier
Browse by category
HIPAA-compliant analytics
HIPAA-compliant artificial intelligence
HIPAA-compliant communication
HIPAA-compliant data engineering
HIPAA-compliant design & creative
HIPAA-compliant devops & monitoring
HIPAA-compliant education & learning
HIPAA-compliant erp & operations
HIPAA-compliant finance & payments
HIPAA-compliant governance, risk & compliance
HIPAA-compliant hr & people ops
HIPAA-compliant infrastructure & cloud
HIPAA-compliant marketing
HIPAA-compliant productivity & docs
HIPAA-compliant project management
HIPAA-compliant sales & crm
HIPAA-compliant security
HIPAA-compliant customer support
HIPAA-compliant websites & cms
Don't see a vendor you need? Submit it