Skip to main content

legal

HIPAA evidence across 231 vendors

There is no HIPAA certification. HHS declined to create certification criteria in the Security Rule preamble (68 FR 8334, 20 February 2003). The artefact that matters is a business associate agreement, so CertReports records whether a vendor offers a BAA, where it says so, and when that was captured.

Verified rows
0
Vendor-stated
231
Expired
0
Last verified
1 Nov 2026
Sertifi logo

Sertifi

E-signature

Sertifi offers an Agreement Platform built for businesses who need a more efficient and secure way to manage the full contract

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state VerifiedCSA STAR mark, CertReports state VerifiedSOC 1 mark, CertReports state Vendor-stated
2 verified · 6 stated26 Oct 2026
Gong logo

Gong

Sales tools

Gong Revenue AI OS helps your entire GTM organization

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state Verified
2 verified · 9 stated26 Oct 2026
monday.com logo

monday.com

Project management

Monday.com Ltd. is an Israeli software company based in Tel Aviv

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state VerifiedISO 27701 mark, CertReports state Vendor-stated
2 verified · 11 stated26 Oct 2026
Sentry logo

Sentry

DevOps and observability

Application performance monitoring for developers & software teams to see errors clearer, solve issues faster & continue learning

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state VerifiedDPF mark, CertReports state Verified
2 verified · 4 stated26 Oct 2026
Vercel logo

Vercel

Cloud and hosting

The autonomous stack for every app and

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedSOC 3 mark, CertReports state Vendor-stated
1 verified · 8 stated1 Nov 2026
Fortinet logo

Fortinet

IoT and devices

Fortinet delivers award-winning cyber security solutions across the entire digital attack surface, securing devices, data, and

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state VerifiedISO 27017 mark, CertReports state Vendor-stated
1 verified · 11 stated1 Nov 2026
Bird logo

Bird

Communications and CPaaS

The world’s largest omnichannel communications platform

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedSOC 3 mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 6 stated1 Nov 2026
Otter.ai logo

Otter.ai

AI assistants

Otter AI Meeting Agent supports real-time transcription, live chat, automated summaries, insights, and action

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedDPF mark, CertReports state VerifiedCCPA mark, CertReports state Vendor-statedTX-RAMP mark, CertReports state Vendor-stated
1 verified · 5 stated1 Nov 2026
Railway logo

Railway

Cloud and hosting

Railway is a full-stack cloud for deploying web apps, servers, databases, and more with automatic scaling, monitoring, and

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedSOC 3 mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 4 stated1 Nov 2026
RingCentral logo

RingCentral

Communications and CPaaS

Power the voice of your business with RingCentral Agentic Voice AI, including AI Receptionist (AIR), AI Virtual Assistant (AVA), & AI

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCyber Essentials mark, CertReports state Vendor-statedSOC 3 mark, CertReports state Vendor-stated
1 verified · 13 stated1 Nov 2026
Palo Alto Networks logo

Palo Alto Networks

Identity and access

Protect your organization with

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedFedRAMP mark, CertReports state VerifiedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-stated
1 verified · 15 stated1 Nov 2026
Webflow logo

Webflow

Design tools

Professional website design and publishing platform.

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 42001 mark, CertReports state Vendor-stated
1 verified · 10 stated1 Nov 2026
Postman logo

Postman

Developer tools

Postman is an API platform for building and using

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state Verified
1 verified · 10 stated1 Nov 2026
Dialpad logo

Dialpad

Communications and CPaaS

The only AI-driven, cloud-native business communications

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state Verified
1 verified · 9 stated1 Nov 2026
Render logo

Render

Cloud and hosting

Deploy and scale any app or agent from your first user to your

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 4 stated1 Nov 2026
CDW logo

CDW

Logistics and supply chain

The information technology products, expertise and service you need to make your business successful.Fast shipping, fast answers, the

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCyber Essentials mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 7 stated1 Nov 2026
Netlify logo

Netlify

Developer tools

Create with AI or code, deploy instantly on production

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 27018 mark, CertReports state Vendor-stated
1 verified · 7 stated1 Nov 2026
FullStory logo

FullStory

Analytics

Fullstory helps companies understand and improve how humans and AI agents interact with digital

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 27701 mark, CertReports state Vendor-statedISO 42001 mark, CertReports state Vendor-stated
1 verified · 10 stated1 Nov 2026
Five9 logo

Five9

Communications and CPaaS

Five9 delivers reliable cloud contact centre and AI services that empower organisations to deliver extraordinary customer

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state VerifiedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state Vendor-stated
1 verified · 10 stated1 Nov 2026
Harvey logo

Harvey

Legal tech

Legal AI tailored for leading law firms and corporate legal teams

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedFedRAMP mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 27701 mark, CertReports state Vendor-stated
1 verified · 10 stated1 Nov 2026
Laravel logo

Laravel

Developer tools

Laravel is a framework for building modern web apps and AI

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedDPF mark, CertReports state VerifiedCCPA mark, CertReports state Vendor-stated
1 verified · 5 stated1 Nov 2026
Perplexity logo

Perplexity

AI assistants

Perplexity AI, Inc., or simply Perplexity, is an American privately held software company offering a web search engine that processes user

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedFedRAMP mark, CertReports state VerifiedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-stated
1 verified · 5 stated1 Nov 2026
PubNub logo

PubNub

Cloud and hosting

Power your real-time app with PubNub—the world's largest pub/sub

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedSOC 3 mark, CertReports state Vendor-statedDPF mark, CertReports state Verified
1 verified · 6 stated1 Nov 2026
Celigo logo

Celigo

No-code and automation

Build, run, and govern automation on one

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedISO 42001 mark, CertReports state Vendor-statedSOC 1 mark, CertReports state Vendor-stated
1 verified · 7 stated1 Nov 2026

What "HIPAA compliant" means on a marketing page

It is a vendor claim. The verifiable facts are a BAA (public, on request or not offered), a HIPAA-mapped SOC 2 or HITRUST assessment, and the products the BAA covers.

Which products the BAA covers

Many vendors sign a BAA only for specific plans or products. Confirm the covered products with the vendor before sending protected health information.

HIPAA by category

HIPAA compliant ai assistantsHIPAA compliant ai infrastructureHIPAA compliant ai toolsHIPAA compliant analyticsHIPAA compliant automotive and mobilityHIPAA compliant banking and lendingHIPAA compliant benefits and insuranceHIPAA compliant business servicesHIPAA compliant cloud and hostingHIPAA compliant cloud storageHIPAA compliant collaborationHIPAA compliant communications and cpaasHIPAA compliant compliance and grcHIPAA compliant consumer appsHIPAA compliant crmHIPAA compliant crypto and web3HIPAA compliant customer supportHIPAA compliant data platformsHIPAA compliant design toolsHIPAA compliant developer toolsHIPAA compliant devops and observabilityHIPAA compliant e-commerceHIPAA compliant e-signatureHIPAA compliant educationHIPAA compliant ehr and practice managementHIPAA compliant email marketingHIPAA compliant energy and climateHIPAA compliant finance and accountingHIPAA compliant form builders and surveysHIPAA compliant government and public sectorHIPAA compliant healthcareHIPAA compliant hr and hrisHIPAA compliant identity and accessHIPAA compliant insuranceHIPAA compliant iot and devicesHIPAA compliant it managementHIPAA compliant legal techHIPAA compliant life sciences and biotechHIPAA compliant logistics and supply chainHIPAA compliant manufacturing and industrialHIPAA compliant marketingHIPAA compliant media and contentHIPAA compliant mental healthHIPAA compliant networkingHIPAA compliant no-code and automationHIPAA compliant nonprofit and fundraisingHIPAA compliant paymentsHIPAA compliant payrollHIPAA compliant procurementHIPAA compliant productivityHIPAA compliant project managementHIPAA compliant real estate and propertyHIPAA compliant recruitingHIPAA compliant research and data providersHIPAA compliant sales toolsHIPAA compliant schedulingHIPAA compliant securityHIPAA compliant telehealthHIPAA compliant translation and localizationHIPAA compliant travel and hospitalityHIPAA compliant video conferencing
All articles