How-to
How to Get a Business Associate Agreement Signed With a Vendor
Solomon Amos · 30 Oct 2026 · 9 min read
legal
HIPAA evidence across 231 vendors
There is no HIPAA certification. HHS declined to create certification criteria in the Security Rule preamble (68 FR 8334, 20 February 2003). The artefact that matters is a business associate agreement, so CertReports records whether a vendor offers a BAA, where it says so, and when that was captured.
- Verified rows
- 0
- Vendor-stated
- 231
- Expired
- 0
- Last verified
- 1 Nov 2026
Roboflow
AI tools
🖼️ Give your software the sense of sight.
SafetyKit
Compliance and GRC
AI agents for risk, compliance, and safety
Salt Security
Security
Protects organizations from getting breached through their APIs.
SigNoz
Developer tools
Open source alternative to DataDog
Spinach AI
AI assistants
The System of Action for Conversation Data
testRigor
Developer tools
Executable specifications in English for test automation
The Token
DevOps and observability
Compression middleware that improves LLM outputs
Velt
Developer tools
SDK for adding an agent and human governance layer to your product
Whalesync
Data platforms
Manage your website from your favorite tools like Airtable and Notion
Auth0
Identity and access
Secure users, AI agents, and more with Auth0, an easy-to-implement, scalable, and adaptable authentication and authorization
Clio
Legal tech
Fireworks AI
AI infrastructure
Fireworks’ state of the art training and inference platform take you beyond the frontier, transforming open models into your specialized
Groq
AI infrastructure
Groq, Inc. is an American artificial intelligence (AI) company that builds an AI accelerator application-specific integrated circuit (ASIC)
Linear
Project management
Purpose-built for planning and building products with AI
Pinecone
AI infrastructure
Software business, developer of cloud-native vector database technology
What "HIPAA compliant" means on a marketing page
It is a vendor claim. The verifiable facts are a BAA (public, on request or not offered), a HIPAA-mapped SOC 2 or HITRUST assessment, and the products the BAA covers.
Which products the BAA covers
Many vendors sign a BAA only for specific plans or products. Confirm the covered products with the vendor before sending protected health information.
HIPAA by category
HIPAA compliant ai assistantsHIPAA compliant ai infrastructureHIPAA compliant ai toolsHIPAA compliant analyticsHIPAA compliant automotive and mobilityHIPAA compliant banking and lendingHIPAA compliant benefits and insuranceHIPAA compliant business servicesHIPAA compliant cloud and hostingHIPAA compliant cloud storageHIPAA compliant collaborationHIPAA compliant communications and cpaasHIPAA compliant compliance and grcHIPAA compliant consumer appsHIPAA compliant crmHIPAA compliant crypto and web3HIPAA compliant customer supportHIPAA compliant data platformsHIPAA compliant design toolsHIPAA compliant developer toolsHIPAA compliant devops and observabilityHIPAA compliant e-commerceHIPAA compliant e-signatureHIPAA compliant educationHIPAA compliant ehr and practice managementHIPAA compliant email marketingHIPAA compliant energy and climateHIPAA compliant finance and accountingHIPAA compliant form builders and surveysHIPAA compliant government and public sectorHIPAA compliant healthcareHIPAA compliant hr and hrisHIPAA compliant identity and accessHIPAA compliant insuranceHIPAA compliant iot and devicesHIPAA compliant it managementHIPAA compliant legal techHIPAA compliant life sciences and biotechHIPAA compliant logistics and supply chainHIPAA compliant manufacturing and industrialHIPAA compliant marketingHIPAA compliant media and contentHIPAA compliant mental healthHIPAA compliant networkingHIPAA compliant no-code and automationHIPAA compliant nonprofit and fundraisingHIPAA compliant paymentsHIPAA compliant payrollHIPAA compliant procurementHIPAA compliant productivityHIPAA compliant project managementHIPAA compliant real estate and propertyHIPAA compliant recruitingHIPAA compliant research and data providersHIPAA compliant sales toolsHIPAA compliant schedulingHIPAA compliant securityHIPAA compliant telehealthHIPAA compliant translation and localizationHIPAA compliant travel and hospitalityHIPAA compliant video conferencing
Guides on HIPAA
All articlesExplainers
What Is HDS? Health Data Hosting vs Other Meanings Explained
Solomon Amos · 25 Oct 2026 · 9 min read