Vendors with a card on this site can show a small badge that links back to their card. The badge says only what the card says: the verdict and the date it was last verified. It is not a certification. HIPAA has none, and a BAA on its own does not make a customer compliant.
What the badge shows
- The verdict on the card: BAA available, BAA on specific plans, or no public BAA terms. Vendors with a "no" verdict do not get a badge.
- The date the card was last verified.
- A link to the card, so every reader lands on the sourced, dated record rather than on a marketing claim.
The badge updates with the card. If a verdict changes after a re-check, the badge text changes too, and the change appears in the site change log.
Who can use it
Any vendor whose card has a verdict of yes, conditional or unknown. Embedding the badge is free and does not affect the card, the verdict or the vendor's position in any table. The badge may be placed on a pricing, security or compliance page. It may not be altered, and its link must point to the card.
How to embed it
Replace <slug> with the slug of your card, for example zoom for /is/zoom-hipaa-compliant/.
<a href="https://hipaacompliant.wiki/is/<slug>-hipaa-compliant/" rel="noopener">
<img src="https://hipaacompliant.wiki/badge/<slug>.svg" alt="HIPAA status verified on HIPAA Compliant Wiki" width="220" height="48">
</a>The image is served from this site and regenerated when the card changes. Do not copy the file to your own server; a copied badge stops updating and will be out of date after the next re-check.
Wording you may use next to it
- "HIPAA status verified by HIPAA Compliant Wiki on
." - "BAA available on
, see the verified card."
Wording you may not use: "HIPAA certified", "HIPAA compliant" as a property of the product, or any claim the card does not make.
Corrections
If the badge or the card is wrong, send a correction with a link to your own BAA or trust page through the correction form. Corrections with a vendor source are applied within five business days and logged.