How-to
How to Get a Business Associate Agreement Signed With a Vendor
Solomon Amos · 30 Oct 2026 · 9 min read
legal
HIPAA evidence across 231 vendors
There is no HIPAA certification. HHS declined to create certification criteria in the Security Rule preamble (68 FR 8334, 20 February 2003). The artefact that matters is a business associate agreement, so CertReports records whether a vendor offers a BAA, where it says so, and when that was captured.
- Verified rows
- 0
- Vendor-stated
- 231
- Expired
- 0
- Last verified
- 2 Nov 2026
Appcues
Marketing
Appcues is an AI-powered customer engagement platform that triggers in-app, email, and push experiences right when users are paying
Daily
AI infrastructure
Conversational Voice and Multimodal AI built with Open Source
Hightouch
Marketing
The leading Composable CDP and AI Decisioning platform
Writer
AI assistants
WRITER is the enterprise AI agent platform trusted by Fortune 500 companies, built to help teams execute and scale on-brand, compliant
Adaptive Security
Education
Human security for the AI
Athenahealth
Healthcare
Athenahealth, Inc. is a privately held American company that provides cloud-based SaaS healthcare technology and network-enabled services
Fathom.video
CRM
Fathom captures, transcribes, and summarizes Zoom, Google Meet, and Microsoft Teams
Zipline
getzipline.com
With retail operations software from Zipline, you fulfill all your goals by unifying your entire
Kustomer
Customer support
Deliver faster, personalized support with Kustomer's AI customer service
Lob
Marketing
Lob is the only automation platform that transforms direct mail into…
Upstash
Data platforms
Serverless Redis, Vector and Search databases with low latency and pay-as-you-go
ChurnZero
Customer support
Deliver digital first customer success with ChurnZero software that helps businesses improve the customer experience and drive
Commvault Systems
Cloud storage
Only Commvault continuously recovers and restores the data powering your enterprise and agents to a clean, trusted
FacilityOS
Compliance and GRC
FacilityOS is the leading visitor & facility management platform, trusted by global enterprises to optimize key facility processes for
Action Verb
Cloud storage
Files.com moves and manages every file your business depends on — across any cloud and any partner, from one
Stream.io
Networking
Scalable and fast APIs for building social networks and
Zowie
Customer support
The AI agent platform leading enterprises trust to run in
Hyperbound
Sales tools
Revenue Activation Platform
Hyros
Analytics
Hyros is the only Ad Tracking Software trusted by thousands of businesses to get accurate ad performance
InRule Technology
No-code and automation
InRule brings together business rules, process automation, and AI to design, test, and deploy governed decisions that meet regulations
Invoca
Sales tools
Convert more inbound leads with AI that engages, qualifies, and routes high-intent buyers across online and offline
KLDiscovery Ontrack
Legal tech
KLDiscovery delivers AI-driven eDiscovery software and services supporting litigation, investigations, and regulatory matters for legal
Lakeside Software
IT management
Get end-to-end visibility across complex IT environments with the best data to enhance proactive IT, root cause analysis, and digital
Laurel AI
Finance and accounting
Laurel is the AI timekeeping platform for law, accounting & consulting firms—auto-capturing billable work and turning time into
What "HIPAA compliant" means on a marketing page
It is a vendor claim. The verifiable facts are a BAA (public, on request or not offered), a HIPAA-mapped SOC 2 or HITRUST assessment, and the products the BAA covers.
Which products the BAA covers
Many vendors sign a BAA only for specific plans or products. Confirm the covered products with the vendor before sending protected health information.
HIPAA by category
HIPAA compliant ai assistantsHIPAA compliant ai infrastructureHIPAA compliant ai toolsHIPAA compliant analyticsHIPAA compliant automotive and mobilityHIPAA compliant banking and lendingHIPAA compliant benefits and insuranceHIPAA compliant business servicesHIPAA compliant cloud and hostingHIPAA compliant cloud storageHIPAA compliant collaborationHIPAA compliant communications and cpaasHIPAA compliant compliance and grcHIPAA compliant consumer appsHIPAA compliant crmHIPAA compliant crypto and web3HIPAA compliant customer supportHIPAA compliant data platformsHIPAA compliant design toolsHIPAA compliant developer toolsHIPAA compliant devops and observabilityHIPAA compliant e-commerceHIPAA compliant e-signatureHIPAA compliant educationHIPAA compliant ehr and practice managementHIPAA compliant email marketingHIPAA compliant energy and climateHIPAA compliant finance and accountingHIPAA compliant form builders and surveysHIPAA compliant government and public sectorHIPAA compliant healthcareHIPAA compliant hr and hrisHIPAA compliant identity and accessHIPAA compliant insuranceHIPAA compliant iot and devicesHIPAA compliant it managementHIPAA compliant legal techHIPAA compliant life sciences and biotechHIPAA compliant logistics and supply chainHIPAA compliant manufacturing and industrialHIPAA compliant marketingHIPAA compliant media and contentHIPAA compliant mental healthHIPAA compliant networkingHIPAA compliant no-code and automationHIPAA compliant nonprofit and fundraisingHIPAA compliant paymentsHIPAA compliant payrollHIPAA compliant procurementHIPAA compliant productivityHIPAA compliant project managementHIPAA compliant real estate and propertyHIPAA compliant recruitingHIPAA compliant research and data providersHIPAA compliant sales toolsHIPAA compliant schedulingHIPAA compliant securityHIPAA compliant telehealthHIPAA compliant translation and localizationHIPAA compliant travel and hospitalityHIPAA compliant video conferencing
Guides on HIPAA
All articlesExplainers
What Is HDS? Health Data Hosting vs Other Meanings Explained
Solomon Amos · 25 Oct 2026 · 9 min read