How-to
How to Get a Business Associate Agreement Signed With a Vendor
Solomon Amos · 30 Oct 2026 · 9 min read
legal
HIPAA evidence across 231 vendors
There is no HIPAA certification. HHS declined to create certification criteria in the Security Rule preamble (68 FR 8334, 20 February 2003). The artefact that matters is a business associate agreement, so CertReports records whether a vendor offers a BAA, where it says so, and when that was captured.
- Verified rows
- 0
- Vendor-stated
- 231
- Expired
- 0
- Last verified
- 1 Nov 2026
Envoy
Legal tech
We provide full-scale international legal immigration services and a proprietary online platform related to managing all employment-based
Axonius
Security
The Axonius Platform gives customers a comprehensive understanding of all assets, their relationships, and business-level
Celonis
Analytics
Celonis has one very simple goal: to analyze today’s processes to make tomorrow’s world more
Druva
Cloud storage
The Druva Data Resiliency Cloud is the only at-scale SaaS platform designed for your multi-cloud
Neo4j
Data platforms
Neo4j is a graph database management system developed by Neo4j
ThoughtSpot
Analytics
ThoughtSpot is the Modern Analytics Cloud
iCIMS
Recruiting
The iCIMS Talent Cloud is a cloud-based talent acquisition platform that helps organizations to attract, engage, and hire the best
Infoblox
Networking
Infoblox's mission is to dramatically simplify complex distributed networking and security by delivering modern, cloud-first networking and
Sigma Computing
Analytics
Sigma is the next-generation of analytics for cloud data warehouses with a familiar spreadsheet-like interface that gives business experts
Daon
Identity and access
Daon, The Digital Identity Trust company, empowers organizations worldwide to establish customer trust through intelligent identity
VTEX
E-commerce
Modernize your stack and drive operational results with an AI-Native unified commerce
Zello
Communications and CPaaS
Zello is what work sounds
ExtraHop Networks
Security
Explore cutting-edge technology solutions for your business
LexisNexis Risk Solutions
lexisnexis.com
QlikTech
Data platforms
Qlik, now with Talend, delivers a data fabric and next-level insights with its end-to-end data integration, data quality, & analytics
Anthropic
AI infrastructure
Anthropic, PBC is an American artificial intelligence (AI) public benefit corporation headquartered in San Francisco, California
ElevenLabs
AI tools
ElevenLabs Inc. is a software company that specializes in developing natural-sounding speech synthesis software using deep learning
Verint
Customer support
Close the AI outcomes gap with the Verint Open
Mixpanel
Analytics
Mixpanel is event analytics for builders that need answers.
Evervault
Compliance and GRC
Evervault specializes in data encryption and confidential computing, helping customers address data security and compliance across various
Hyland Software
Cloud storage
Hyland provides industry-leading technology foundations that empower its customers to create better human
JAMF Software
IT management
Jamf is a global provider of organization cloud-based mobile device management (MDM) hosting services that allow organizations to off-load
Localize
Translation and localization
Localize is a cloud-based translation management system that enables companies to bring their products to multilingual international
Reveal Data
AI tools
Reveal provides world-class document review technology, underpinned by leading processing, visual analytics, and artificial intelligence
What "HIPAA compliant" means on a marketing page
It is a vendor claim. The verifiable facts are a BAA (public, on request or not offered), a HIPAA-mapped SOC 2 or HITRUST assessment, and the products the BAA covers.
Which products the BAA covers
Many vendors sign a BAA only for specific plans or products. Confirm the covered products with the vendor before sending protected health information.
HIPAA by category
HIPAA compliant ai assistantsHIPAA compliant ai infrastructureHIPAA compliant ai toolsHIPAA compliant analyticsHIPAA compliant automotive and mobilityHIPAA compliant banking and lendingHIPAA compliant benefits and insuranceHIPAA compliant business servicesHIPAA compliant cloud and hostingHIPAA compliant cloud storageHIPAA compliant collaborationHIPAA compliant communications and cpaasHIPAA compliant compliance and grcHIPAA compliant consumer appsHIPAA compliant crmHIPAA compliant crypto and web3HIPAA compliant customer supportHIPAA compliant data platformsHIPAA compliant design toolsHIPAA compliant developer toolsHIPAA compliant devops and observabilityHIPAA compliant e-commerceHIPAA compliant e-signatureHIPAA compliant educationHIPAA compliant ehr and practice managementHIPAA compliant email marketingHIPAA compliant energy and climateHIPAA compliant finance and accountingHIPAA compliant form builders and surveysHIPAA compliant government and public sectorHIPAA compliant healthcareHIPAA compliant hr and hrisHIPAA compliant identity and accessHIPAA compliant insuranceHIPAA compliant iot and devicesHIPAA compliant it managementHIPAA compliant legal techHIPAA compliant life sciences and biotechHIPAA compliant logistics and supply chainHIPAA compliant manufacturing and industrialHIPAA compliant marketingHIPAA compliant media and contentHIPAA compliant mental healthHIPAA compliant networkingHIPAA compliant no-code and automationHIPAA compliant nonprofit and fundraisingHIPAA compliant paymentsHIPAA compliant payrollHIPAA compliant procurementHIPAA compliant productivityHIPAA compliant project managementHIPAA compliant real estate and propertyHIPAA compliant recruitingHIPAA compliant research and data providersHIPAA compliant sales toolsHIPAA compliant schedulingHIPAA compliant securityHIPAA compliant telehealthHIPAA compliant translation and localizationHIPAA compliant travel and hospitalityHIPAA compliant video conferencing
Guides on HIPAA
All articlesExplainers
What Is HDS? Health Data Hosting vs Other Meanings Explained
Solomon Amos · 25 Oct 2026 · 9 min read