This site is a reference on one narrow question: which software and services will sign a Business Associate Agreement (BAA), on which plans, and for what. It exists because the answer is usually buried in a help-center article, changes without notice, and is repeated inaccurately across vendor blogs.
What you will find here
- A card for each vendor with a verdict (yes, conditional, no, unknown), the plans that include a BAA, what the BAA covers and excludes, the security controls the vendor publishes, the entry price of the cheapest plan with a BAA, and the sources with quotes and dates.
- Category tables that compare vendors in one category on the same columns, sorted by facts.
- Short guides on the terms you need to read the cards: what a BAA is, what "HIPAA compliant" does and does not mean, what the law requires of your organization rather than of the vendor.
- A change feed with every verdict change and its source.
What you will not find here
- Legal advice. The cards describe what vendors publish; they do not decide whether your organization is compliant.
- "HIPAA certified" badges. There is no such certification.
- Rankings by opinion. Rows are sorted by verdict, plan and price, never by editorial preference or payment.
Who publishes it
The HIPAA Compliant Wiki is published by Chanty, Inc., the company behind Chanty, a team chat and work coordination product. Chanty competes with some vendors listed here. We say so on every page where it matters, Chanty's own card is held to the same evidence standard as every other card, and the methodology page explains how placement in tables is decided. If you think a card is unfair to a vendor, including a Chanty competitor, use the correction form; corrections with a vendor source are applied and logged.
Open data
Every card can be downloaded as JSON, and every category table as CSV or JSON. The verified badge that vendors may embed links back to their card, so readers always land on the dated, sourced record rather than on a marketing claim.
Contact
Corrections and new vendor requests: the correction form. Everything else: the address in the footer.