Conditional Adobe makes a BAA available on Acrobat Sign Solutions for enterprise or business plans; individual and other plans are excluded (verified 2026-10-19). Adobe does not state any other compliance property for Adobe Sign on the pages reviewed, so this page reports only what Adobe's help article and HIPAA Ready trust page say. All vendors are listed at Is it HIPAA compliant? All vendors.
Short answer
Adobe signs a BAA on request through an Adobe sales or channel representative, for Acrobat Sign Solutions on enterprise or business plans. Individual and other plans are not eligible, and not every account qualifies for enablement.
Standalone Adobe Acrobat is not listed among Adobe's HIPAA-Ready services. See the separate Acrobat entry under Alternatives.
Which plans include a BAA
A Business Associate Agreement (BAA) must be executed before an e-signature service handles PHI, such as a signed consent form or a patient intake packet. Adobe's availability by plan:
| Plan | BAA | How it is obtained | Extra cost |
|---|---|---|---|
| Acrobat Sign Solutions for enterprise | Available | Contact the Adobe sales or channel representative with the Acrobat Sign Account ID; after the BAA is executed, Adobe enables the Linked Business Associate Agreement setting | Not published by the vendor |
| Acrobat Sign Solutions for business | Available | Same process | Not published by the vendor |
| Individual plans | Not available | Not applicable | Not applicable |
| Any account not on an enterprise or business plan | Not available | Not applicable | Not applicable |
Minimum seat counts are also not published by the vendor.
What the BAA covers and what it excludes
Covered services
- Adobe Acrobat Sign
- Adobe Acrobat Sign for Government
Adobe acts as a Business Associate for its HIPAA-Ready Services only.
Excluded
- Salesforce Document Builder, which is disabled when HIPAA settings are enabled.
- Adobe products not designated HIPAA-Ready. PHI is not permitted in them.
A clinic that routes signing through a Salesforce-based workflow should expect Document Builder to stop working once the HIPAA settings are on.
Security controls the vendor publishes
| Control | Published status |
|---|---|
| Encryption in transit | Not published by the vendor |
| Encryption at rest | Not published by the vendor |
| Audit log | Not published by the vendor |
| Access controls | Not published by the vendor |
| SSO | Not published by the vendor |
| Data residency | Not published by the vendor |
| SOC 2 | Not published by the vendor |
| HITRUST | Not published by the vendor |
| ISO 27001 | Not published by the vendor |
Absence from the pages reviewed is not evidence that a control does not exist. Ask Adobe for these details during procurement.
How to use Adobe Sign with PHI
A signed BAA is one input, not the whole program. For the wider picture, see the HIPAA guides. Responsibilities that stay with your organization:
- Execute the BAA before any PHI is processed in Acrobat Sign.
- Confirm with Adobe that your account is eligible, since not all accounts qualify for enablement.
- Confirm the Linked Business Associate Agreement setting is enabled on your account.
- Do not use Salesforce Document Builder with HIPAA settings enabled.
- Keep PHI out of Adobe products that are not designated HIPAA-Ready, including standalone Acrobat.
- Manage user access and offboarding, for example removing a departing front-desk employee's access the same day.
- Train staff and maintain written policies for how signed documents are stored and shared.
Compliance depends on the signed BAA, your configuration and your organization's own policies.
Alternatives with a BAA
| Vendor | Verdict | BAA starting plan |
|---|---|---|
| Adobe Acrobat | Conditional | Acrobat Sign Solutions for enterprise |
| Box | Conditional | Enterprise |
| DocHub | Conditional | Site License |
| DocuSign | Conditional | Enhanced plans (contact sales) |
| Dropbox Sign | Conditional | Standard (annual) |
Compare more options in HIPAA-compliant electronic signature software and HIPAA-compliant document management software.
Sources
- HIPAA configurations in Adobe Acrobat Sign Solutions — Help article, checked 2026-10-19. "The HIPAA readiness capability is only available through an Adobe Acrobat Sign for enterprise or business subscription plan. Not all accounts will qualify for enablement."
- HIPAA configurations in Adobe Acrobat Sign Solutions — Help article, checked 2026-10-19. "Before processing protected health information through Acrobat Sign, your organization must enter into a Business Associate Agreement (BAA) with Adobe. Contact your sales or channel representative to determine eligibility and establish a BAA with Adobe."
- HIPAA Ready — Trust center, checked 2026-10-19. "Adobe acts as a Business Associate for its HIPAA-Ready Services, which are listed below."
Changes
No changes recorded since first verification on 2026-10-19. See recent changes in vendor HIPAA status.
Changes and FAQ
No changes recorded since first verification on 2026-10-19. Follow Recent changes in vendor HIPAA status for updates across vendors.
Does Adobe sign a BAA for Acrobat Sign?
Yes, on request, for Acrobat Sign Solutions on enterprise or business plans. Contact your Adobe sales or channel representative with your Acrobat Sign Account ID. After the BAA is executed, Adobe enables the Linked Business Associate Agreement setting.
Which Adobe Acrobat Sign plans are eligible for a BAA?
Acrobat Sign Solutions for enterprise and Acrobat Sign Solutions for business. Not all accounts qualify for enablement. Extra cost and seat minimums are not published by the vendor.
Can I use an individual Acrobat Sign plan with PHI?
No. Adobe does not make a BAA available on individual plans or on any account outside the enterprise and business plans, so PHI should not be processed there.
Is standalone Adobe Acrobat covered by Adobe's HIPAA-Ready services?
No. Adobe's HIPAA-Ready services are Adobe Acrobat Sign and Adobe Acrobat Sign for Government. Adobe products not designated HIPAA-Ready do not permit PHI. See the Adobe Acrobat entry for its separate status.