Is it HIPAA compliant? All vendors

125 vendors checked against their own BAA, trust and pricing pages: 12 sign a BAA on every plan, 84 on specific plans or on request, 15 do not sign one or forbid PHI, 14 publish nothing. Use the chips to filter by verdict and click a column to sort. Each vendor card carries the plans, covered services, exclusions and sources.

Vendor	Verdict	BAA from plan	Categories	Last verified
ActiveCampaign	Conditional	Enterprise	Marketing	2026-10-28
Acuity Scheduling	Conditional	Premium (formerly Powerhouse)	Scheduling	2026-10-19
Adobe Acrobat	Conditional	Acrobat Sign Solutions for enterprise	Documents, E-signature	2026-10-20
Adobe Acrobat Sign	Conditional	Acrobat Sign Solutions for enterprise	E-signature, Documents	2026-10-19
Amazon Bedrock	Yes	All AWS accounts	AI tools	2026-10-20
Amazon Web Services	Conditional	All AWS accounts (no plan tiers)	Hosting, Databases, Storage, Developer platforms	2026-10-19
Anthropic Claude	Conditional	Claude Enterprise (HIPAA enabled by the Primary Owner)	AI tools	2026-10-19
Atlantic.Net	Conditional	HIPAA Developer	Hosting	2026-10-20
Backblaze	Conditional	B2 Cloud Storage (business customers)	Backup, Storage	2026-10-28
Box	Conditional	Enterprise	File sharing, Storage, Documents	2026-10-19
Bubble	Conditional	Dedicated Enterprise (HIPAA add-on)	Websites	2026-10-28
Calendly	No	—	Scheduling	2026-10-19
Carbonite	Conditional	Carbonite Safe Backup Pro (Core, Power, Ultimate)	Backup	2026-10-28
Chanty	Conditional	Business	Team chat, Collaboration	2026-10-20
Constant Contact	Conditional	All plans (on request)	Email marketing, Marketing	2026-10-20
DeepScribe	Yes	—	AI scribes	2026-10-28
Dialpad	Conditional	All paid Dialpad accounts (Dialpad Connect Standard, Pro, En	Phone systems	2026-10-20
Discord	Unknown	—	Team chat	2026-10-20
DocHub	Conditional	Site License	E-signature, Documents	2026-10-20
DocuSign	Conditional	Enhanced plans (contact sales)	E-signature	2026-10-19
Doximity GPT	Yes	Member (free)	AI tools	2026-10-20
Doxy.me	Yes	Free	Video, Telehealth	2026-10-20
Dragon Medical One / Dragon Copilot	Unknown	—	AI scribes	2026-10-28
Dropbox	Conditional	Standard	File sharing, Storage, Backup	2026-10-19
Dropbox Sign	Conditional	Standard (annual)	E-signature	2026-10-20
eFax	Conditional	eFax Business	Fax	2026-10-20
FaceTime	Unknown	—	Video	2026-10-20
Fathom	Yes	Free	Transcription	2026-10-28
Fax.Plus	Conditional	Enterprise	Fax	2026-10-20
Firebase	Conditional	Google Cloud BAA (any billing account; Firebase services gov	Developer platforms	2026-10-28
Fireflies.ai	Conditional	Enterprise	Transcription, AI tools	2026-10-20
Formstack	Conditional	Forms (HIPAA add-on)	Forms, E-signature	2026-10-20
Freed	Yes	Starter	AI scribes	2026-10-28
GitHub	Unknown	—	Developer platforms	2026-10-28
Gmail in Google Workspace	Conditional	Business Starter	Email	2026-10-20
GoDaddy	Conditional	Microsoft 365 email (plans GoDaddy represents as HIPAA-compl	Hosting, Websites, Email	2026-10-20
GoHighLevel	Conditional	Any plan with HIPAA Compliance add-on	Marketing, CRM	2026-10-28
Google Ads	No	—	Marketing	2026-10-28
Google Analytics	No	—	Marketing	2026-10-28
Google Calendar	Conditional	Google Workspace paid editions (Business Starter and above,	Scheduling	2026-10-28
Google Chat	Conditional	Google Workspace (admin-managed; accepted in the Admin conso	Team chat	2026-10-20
Google Cloud Platform	Yes	All Google Cloud accounts	Hosting, Databases, Storage, Developer platforms	2026-10-20
Google Docs	Conditional	Google Workspace (Business Starter, Business Standard, Busin	Documents	2026-10-28
Google Drive	Conditional	Google Workspace (paid editions)	File sharing, Storage, Backup	2026-10-20
Google Forms	Conditional	Google Workspace paid editions administered in the Admin con	Forms	2026-10-19
Google Gemini	Conditional	Google Workspace editions where Gemini Apps is a core servic	AI tools	2026-10-19
Google Meet	Conditional	Google Workspace (paid editions)	Video	2026-10-20
Google Voice	Conditional	Google Voice for Google Workspace (Starter, Standard, Premie	Phone systems	2026-10-20
Google Workspace	Conditional	Google Workspace paid editions administered in the Admin con	Office suites, Email, File sharing, Video, Team chat	2026-10-19
GoTo Meeting	Conditional	GoTo Meeting for Healthcare	Video	2026-10-20
Granola	Conditional	Enterprise	Transcription	2026-10-28
Grasshopper	No	—	Phone systems	2026-10-20
Gravity Forms	No	—	Forms	2026-10-20
Grok	Conditional	API (enterprise)	AI tools	2026-10-20
GroupMe	Unknown	—	Team chat	2026-10-20
Heidi Health	Conditional	—	AI scribes	2026-10-28
Heroku	Conditional	Heroku Shield Private Spaces (Enterprise)	Developer platforms	2026-10-28
HubSpot	Conditional	Marketing Hub Enterprise	CRM, Marketing	2026-10-19
HumbleFax	Unknown	—	Fax	2026-10-20
Hushmail for Healthcare	Conditional	Healthcare Basic	Email, Forms	2026-10-20
iCloud	No	—	File sharing, Storage, Backup	2026-10-20
iFax	Conditional	Plus	Fax	2026-10-20
iMessage	No	—	Team chat, Texting	2026-10-20
Jane App	Yes	Balance	Scheduling	2026-10-28
Jotform	Conditional	Gold	Forms	2026-10-19
Liquid Web	Conditional	Standalone HIPAA server	Hosting	2026-10-20
Mailchimp	Unknown	—	Email marketing, Marketing	2026-10-20
Microsoft 365	Conditional	Microsoft 365 Business Basic	Office suites, Email, File sharing	2026-10-19
Microsoft Azure	Conditional	All Azure customers under a volume licensing or online subsc	Hosting, Databases, AI tools, Developer platforms	2026-10-19
Microsoft Copilot (Microsoft 365 Copilot)	Conditional	Microsoft 365 Copilot Business (add-on, up to 300 users)	AI tools	2026-10-19
Microsoft Forms	Conditional	Office 365 / Microsoft 365 commercial subscriptions	Forms	2026-10-20
Microsoft Teams	Conditional	Microsoft Teams Essentials	Team chat, Video	2026-10-19
monday.com	Conditional	Enterprise (work management)	CRM	2026-10-28
MyFax	Unknown	—	Fax	2026-10-20
Nextiva	Conditional	Nextiva HIPAA-compliant ("HC") service offerings designated	Phone systems	2026-10-20
Notion	Conditional	Enterprise	Project management, Documents, Office suites	2026-10-19
OneDrive	Conditional	Office 365 / Microsoft 365 commercial subscriptions (OneDriv	Storage, Backup	2026-10-28
OpenAI ChatGPT and OpenAI API	Conditional	ChatGPT for Healthcare	AI tools, Chatbots	2026-10-19
OpenEvidence	Yes	Individual clinician accounts (standard BAA)	AI tools	2026-10-20
OpenText	Unknown	—	Documents	2026-10-28
Otter.ai	Conditional	Enterprise	Transcription	2026-10-19
Outlook / Exchange Online in Microsoft 365	Conditional	Microsoft 365 Business (Basic, Standard, Premium)	Email	2026-10-20
PandaDoc	Conditional	Enterprise	E-signature, Documents	2026-10-20
Paubox	Yes	Email Suite Standard	Email, Email marketing	2026-10-20
PayPal (and Venmo)	No	—	Payments	2026-10-19
Perplexity	Conditional	Enterprise (Enterprise Pro / Enterprise Max)	AI tools	2026-10-20
Pipedrive	No	—	CRM	2026-10-28
Piwik PRO	Conditional	Enterprise	Marketing	2026-10-28
Plaud	Conditional	Starter	Transcription	2026-10-28
Proton Mail	Conditional	All Proton plans (on request)	Email	2026-10-20
Qualtrics	Conditional	—	Forms	2026-10-20
Read AI	Conditional	Enterprise+ (annual)	Transcription	2026-10-28
RingCentral	Conditional	Paid RingEX plans (all tiers)	Phone systems, Fax	2026-10-20
Salesforce	Conditional	HIPAA Covered Services listed on the Business Associate Adde	CRM	2026-10-19
Sfax	Conditional	Plus	Fax	2026-10-20
ShareFile	Conditional	Premium	File sharing, Documents	2026-10-20
SharePoint	Conditional	Office 365 / Microsoft 365 commercial subscriptions (SharePo	Storage, Documents	2026-10-28
Shopify	No	—	Websites	2026-10-28
Signal	Unknown	—	Team chat	2026-10-20
SimplePractice	Yes	Starter	Scheduling	2026-10-28
Slack	Conditional	Enterprise (Enterprise Grid / Enterprise+)	Team chat, Collaboration	2026-10-19
Square	Conditional	Square Free	Payments, Scheduling	2026-10-19
Squarespace	Conditional	Acuity Scheduling Premium (Powerhouse)	Websites	2026-10-19
SRFax	Conditional	Healthcare Lite	Fax	2026-10-20
Stripe	No	—	Payments	2026-10-19
Suki	Conditional	—	AI scribes	2026-10-28
Supabase	Conditional	Team	Developer platforms	2026-10-28
SurveyMonkey	Conditional	Enterprise	Forms	2026-10-20
Telegram	Unknown	—	Team chat	2026-10-20
Twilio	Conditional	Security Edition	Developer platforms	2026-10-28
Typeform	Conditional	Enterprise	Forms	2026-10-19
Upheal	Yes	Free	AI scribes	2026-10-28
Vagaro	Conditional	Medical spa / wellness customers (plan not specified on vend	Scheduling	2026-10-28
Vercel	Conditional	Pro	Developer platforms	2026-10-28
Vonage Business Communications	Conditional	Vonage Communications APIs – Enterprise accounts (Video, Voi	Phone systems	2026-10-20
Webex	Unknown	—	Video, Team chat	2026-10-20
Webflow	No	—	Websites	2026-10-28
WeTransfer	Unknown	—	File sharing	2026-10-20
WhatsApp	No	—	Team chat, Texting	2026-10-20
Wix	Conditional	Business	Websites, Forms	2026-10-19
WordPress.com	Unknown	—	Websites	2026-10-19
WP Engine	No	—	Hosting, Websites	2026-10-20
Zapier	No	—	Workflow	2026-10-19
Zoho CRM	Conditional	Standard	CRM	2026-10-28
Zoom	Conditional	Pro	Video, Team chat	2026-10-19

How to read the verdicts

Yes: a BAA on every plan, including free tiers, for the services on the card. Conditional: a BAA only on specific plans, services or on request; the card names them. No: the vendor states it does not sign a BAA, or its terms forbid PHI. Unknown: no public statement; the card says what was looked for. A BAA is necessary, not sufficient: configuration, policies and training stay with you. See how we verify.

Missing a vendor? Ask for a card.

• Is Zoom HIPAA compliant? BAA by plan, covered services and exclusions
• Is Gmail HIPAA compliant? BAA by plan, covered services and exclusions
• Is WordPress HIPAA compliant? BAA by plan, covered services and exclusions
• Is Google Workspace HIPAA compliant? BAA by plan, covered services and exclusions
• Is Claude HIPAA compliant? BAA by plan, covered services and exclusions
• Is Microsoft 365 HIPAA compliant? BAA by plan, covered services and exclusions
• Is AWS Bedrock HIPAA compliant? BAA by plan, covered services and exclusions
• Is Dropbox HIPAA compliant? BAA by plan, covered services and exclusions
• Is Google Forms HIPAA compliant? BAA by plan, covered services and exclusions
• Is Microsoft Copilot HIPAA compliant? BAA by plan, covered services and exclusions
• Is OneDrive HIPAA compliant? BAA by plan, covered services and exclusions
• Is Google Meet HIPAA compliant? BAA by plan, covered services and exclusions
• Is Outlook HIPAA compliant? BAA by plan, covered services and exclusions
• Is GoDaddy HIPAA compliant? BAA by plan, covered services and exclusions
• Is Wix HIPAA compliant? BAA by plan, covered services and exclusions
• Is Google Docs HIPAA compliant? BAA by plan, covered services and exclusions
• Is Gemini HIPAA compliant? BAA by plan, covered services and exclusions
• Is Google Analytics HIPAA compliant? BAA by plan, covered services and exclusions
• Is SharePoint HIPAA compliant? BAA by plan, covered services and exclusions
• Is AWS HIPAA compliant? BAA by plan, covered services and exclusions
• Is Acuity Scheduling HIPAA compliant? BAA by plan, covered services and exclusions
• Is HubSpot HIPAA compliant? BAA by plan, covered services and exclusions
• Is Zapier HIPAA compliant? BAA by plan, covered services and exclusions
• Is Squarespace HIPAA compliant? BAA by plan, covered services and exclusions
• Is Google Drive HIPAA compliant? BAA by plan, covered services and exclusions
• Is OpenEvidence HIPAA compliant? BAA by plan, covered services and exclusions
• Is Otter.ai HIPAA compliant? BAA by plan, covered services and exclusions
• Is Box HIPAA compliant? BAA by plan, covered services and exclusions
• Is Notion HIPAA compliant? BAA by plan, covered services and exclusions
• Is Salesforce HIPAA compliant? BAA by plan, covered services and exclusions
• Is SimplePractice HIPAA compliant? BAA by plan, covered services and exclusions
• Is Google Ads HIPAA compliant? BAA by plan, covered services and exclusions
• Is Plaud HIPAA compliant? BAA by plan, covered services and exclusions
• Is Calendly HIPAA compliant? BAA by plan, covered services and exclusions
• Is Twilio HIPAA compliant? BAA by plan, covered services and exclusions
• Is Zoho CRM HIPAA compliant? BAA by plan, covered services and exclusions
• Is Qualtrics HIPAA compliant? BAA by plan, covered services and exclusions
• Is Shopify HIPAA compliant? BAA by plan, covered services and exclusions
• Is Stripe HIPAA compliant? BAA by plan, covered services and exclusions
• Is Doxy.me HIPAA compliant? BAA by plan, covered services and exclusions
• Is Formstack HIPAA compliant? BAA by plan, covered services and exclusions
• Is monday.com HIPAA compliant? BAA by plan, covered services and exclusions
• Is GoHighLevel HIPAA compliant? BAA by plan, covered services and exclusions
• Is Perplexity AI HIPAA compliant? BAA by plan, covered services and exclusions
• Is Pipedrive HIPAA compliant? BAA by plan, covered services and exclusions
• Is Webflow HIPAA compliant? BAA by plan, covered services and exclusions
• Is Typeform HIPAA compliant? BAA by plan, covered services and exclusions
• Is Gravity Forms HIPAA compliant? BAA by plan, covered services and exclusions
• Is Supabase HIPAA compliant? BAA by plan, covered services and exclusions
• Is FaceTime HIPAA compliant? BAA by plan, covered services and exclusions
• Is Dropbox Sign HIPAA compliant? BAA by plan, covered services and exclusions
• Is Square HIPAA compliant? BAA by plan, covered services and exclusions
• Is MyFax HIPAA compliant? BAA by plan, covered services and exclusions
• Is Heidi HIPAA compliant? BAA by plan, covered services and exclusions
• Is Fax.Plus HIPAA compliant? BAA by plan, covered services and exclusions
• Is PandaDoc HIPAA compliant? BAA by plan, covered services and exclusions
• Is Dialpad HIPAA compliant? BAA by plan, covered services and exclusions
• Is Microsoft Forms HIPAA compliant? BAA by plan, covered services and exclusions
• Is iFax HIPAA compliant? BAA by plan, covered services and exclusions
• Is ShareFile HIPAA compliant? BAA by plan, covered services and exclusions
• Is Doximity GPT HIPAA compliant? BAA by plan, covered services and exclusions
• Is Firebase HIPAA compliant? BAA by plan, covered services and exclusions
• Is Vercel HIPAA compliant? BAA by plan, covered services and exclusions
• Is Read AI HIPAA compliant? BAA by plan, covered services and exclusions
• Is Granola HIPAA compliant? BAA by plan, covered services and exclusions
• Is Nextiva HIPAA compliant? BAA by plan, covered services and exclusions
• Is Carbonite HIPAA compliant? BAA by plan, covered services and exclusions
• Is Google Cloud HIPAA compliant? BAA by plan, covered services and exclusions
• Is Freed HIPAA compliant? BAA by plan, covered services and exclusions
• Is Fireflies.ai HIPAA compliant? BAA by plan, covered services and exclusions
• Is Telegram HIPAA compliant? BAA by plan, covered services and exclusions
• Is Paubox HIPAA compliant? BAA by plan, covered services and exclusions
• Is Webex HIPAA compliant? BAA by plan, covered services and exclusions
• Is Jane App HIPAA compliant? BAA by plan, covered services and exclusions
• Is Adobe Acrobat HIPAA compliant? BAA by plan, covered services and exclusions
• Is WP Engine HIPAA compliant? BAA by plan, covered services and exclusions
• Is Vagaro HIPAA compliant? BAA by plan, covered services and exclusions
• Is GoToMeeting HIPAA compliant? BAA by plan, covered services and exclusions
• Is SRFax HIPAA compliant? BAA by plan, covered services and exclusions
• Is Liquid Web HIPAA compliant? BAA by plan, covered services and exclusions
• Is Fathom HIPAA compliant? BAA by plan, covered services and exclusions
• Is Suki HIPAA compliant? BAA by plan, covered services and exclusions
• Is Backblaze HIPAA compliant? BAA by plan, covered services and exclusions
• Is OpenText HIPAA compliant? BAA by plan, covered services and exclusions
• Is iCloud HIPAA compliant? BAA by plan, covered services and exclusions
• Is Constant Contact HIPAA compliant? BAA by plan, covered services and exclusions
• Is PayPal HIPAA compliant? BAA by plan, covered services and exclusions
• Is Dragon HIPAA compliant? BAA by plan, covered services and exclusions
• Is ActiveCampaign HIPAA compliant? BAA by plan, covered services and exclusions
• Is Piwik PRO HIPAA compliant? BAA by plan, covered services and exclusions
• Is Google Calendar HIPAA compliant? BAA by plan, covered services and exclusions
• Is Grok HIPAA compliant? BAA by plan, covered services and exclusions
• Is Atlantic.Net HIPAA compliant? BAA by plan, covered services and exclusions
• Is Sfax HIPAA compliant? BAA by plan, covered services and exclusions
• Is Upheal HIPAA compliant? BAA by plan, covered services and exclusions
• Is WeTransfer HIPAA compliant? BAA by plan, covered services and exclusions
• Is DeepScribe HIPAA compliant? BAA by plan, covered services and exclusions
• Is DocHub HIPAA compliant? BAA by plan, covered services and exclusions
• Is Bubble HIPAA compliant? BAA by plan, covered services and exclusions
• Is Vonage HIPAA compliant? BAA by plan, covered services and exclusions
• Is Hushmail HIPAA compliant? BAA by plan, covered services and exclusions
• Is Heroku HIPAA compliant? BAA by plan, covered services and exclusions
• Is Discord HIPAA compliant? BAA by plan, covered services and exclusions
• Is GitHub HIPAA compliant? BAA by plan, covered services and exclusions
• Is Slack HIPAA compliant? BAA by plan, covered services and exclusions
• Is Microsoft Teams HIPAA compliant? BAA by plan, covered services and exclusions
• Is WhatsApp HIPAA compliant? BAA by plan, covered services and exclusions
• Is Google Chat HIPAA compliant? BAA by plan, covered services and exclusions
• Is Signal HIPAA compliant? BAA by plan, covered services and exclusions
• Is iMessage HIPAA compliant? BAA by plan, covered services and exclusions
• Is GroupMe HIPAA compliant? BAA by plan, covered services and exclusions
• Is ChatGPT HIPAA compliant? BAA by plan, covered services and exclusions
• Is eFax HIPAA compliant? BAA by plan, covered services and exclusions
• Is Google Voice HIPAA compliant? BAA by plan, covered services and exclusions
• Is RingCentral HIPAA compliant? BAA by plan, covered services and exclusions
• Is Azure HIPAA compliant? BAA by plan, covered services and exclusions
• Is ProtonMail HIPAA compliant? BAA by plan, covered services and exclusions
• Is Mailchimp HIPAA compliant? BAA by plan, covered services and exclusions
• Is DocuSign HIPAA compliant? BAA by plan, covered services and exclusions
• Is Adobe Sign HIPAA compliant? BAA by plan, covered services and exclusions
• Is Jotform HIPAA compliant? BAA by plan, covered services and exclusions
• Is HumbleFax HIPAA compliant? BAA by plan, covered services and exclusions
• Is SurveyMonkey HIPAA compliant? BAA by plan, covered services and exclusions
• Is Grasshopper HIPAA compliant? BAA by plan, covered services and exclusions
• Is Chanty HIPAA compliant? BAA by plan, covered services and exclusions