How-to
How to Get a Business Associate Agreement Signed With a Vendor
Solomon Amos · 30 Oct 2026 · 9 min read
legal
HIPAA evidence across 231 vendors
There is no HIPAA certification. HHS declined to create certification criteria in the Security Rule preamble (68 FR 8334, 20 February 2003). The artefact that matters is a business associate agreement, so CertReports records whether a vendor offers a BAA, where it says so, and when that was captured.
- Verified rows
- 0
- Vendor-stated
- 231
- Expired
- 0
- Last verified
- 2 Nov 2026
MedaSystems
Healthcare
A cloud platform empowering global expanded and managed access
Merge API
Developer tools
Merge is the infrastructure layer for production
Nango
Developer tools
A single API for all your integrations
OpenClinica
Healthcare
Your source for clinical trial technology | eSource | EDC | ePRO | eConsent | eCOA | Randomization | Reporting | Rescue Study
Origami Risk
Compliance and GRC
Origami Risk delivers purpose-built risk, safety, and insurance software to streamline compliance, claims, and operations, all on a
PCI Pal
Communications and CPaaS
Secure contact center payments, boost CX, and achieve PCI
Prisma Data
Developer tools
Prisma gives TypeScript and Node.js teams Prisma ORM, Prisma Postgres, and Prisma Compute: a type-safe ORM, managed Postgres, and Compute
Reality Defender
AI tools
Enterprise Deepfake Detection
Avora
Sales tools
Revenue Intelligence platform that automatically captures sales activities to help you identify and fix revenue
SearchStax
searchstax.com
SearchStax is a cloud-based SaaS solution that helps organizations improve website search
Sembly AI
Business services
Sembly â agentic AI platform for professional
SignalWire
Communications and CPaaS
Build AI voice agents, contact centers, and unified communications on one programmable
Skynet Technologies
Developer tools
WCAG 2.1, 2.2, EAA, Website Accessibility Services including manual audit, website, PDF / doc remediation, VPAT ACR, Consulting for any
Softheon
Healthcare
All-in-one healthcare operations platform for enrollment, billing, payments, and member
Spin Technology
spin.ai
Founded in 2017 and Headquartered in Palo Alto, Spin.AI delivers the most innovating last line of cyberdefense, SaaS data management, and
Sprig
Analytics
Sprig is a unified research platform built for UX teams who need fast, relevant user
TeamDynamix
No-code and automation
TeamDynamix is a no-code AI ITSM
Tempo Software
Project management
Tempo Software is a leading provider of robust project and portfolio management solutions designed to empower organizations to achieve
Vimeo
Media and content
The video platform trusted by 287 million creatives, entrepreneurs, and
Zingtree
Developer tools
Fireflies.ai
AI assistants
Fireflies takes notes, manages tasks, and automates workflows across meetings, email, chat, CRM, and your
Glean
AI assistants
Glean is the Enterprise AI platform connected to your enterprise's
LangChain
AI infrastructure
LangChain is a software framework that helps facilitate the integration of large language models (LLMs) into applications
Redis
Data platforms
Redis is an in-memory key–value database, used as a distributed cache and message broker, with optional durability
What "HIPAA compliant" means on a marketing page
It is a vendor claim. The verifiable facts are a BAA (public, on request or not offered), a HIPAA-mapped SOC 2 or HITRUST assessment, and the products the BAA covers.
Which products the BAA covers
Many vendors sign a BAA only for specific plans or products. Confirm the covered products with the vendor before sending protected health information.
HIPAA by category
HIPAA compliant ai assistantsHIPAA compliant ai infrastructureHIPAA compliant ai toolsHIPAA compliant analyticsHIPAA compliant automotive and mobilityHIPAA compliant banking and lendingHIPAA compliant benefits and insuranceHIPAA compliant business servicesHIPAA compliant cloud and hostingHIPAA compliant cloud storageHIPAA compliant collaborationHIPAA compliant communications and cpaasHIPAA compliant compliance and grcHIPAA compliant consumer appsHIPAA compliant crmHIPAA compliant crypto and web3HIPAA compliant customer supportHIPAA compliant data platformsHIPAA compliant design toolsHIPAA compliant developer toolsHIPAA compliant devops and observabilityHIPAA compliant e-commerceHIPAA compliant e-signatureHIPAA compliant educationHIPAA compliant ehr and practice managementHIPAA compliant email marketingHIPAA compliant energy and climateHIPAA compliant finance and accountingHIPAA compliant form builders and surveysHIPAA compliant government and public sectorHIPAA compliant healthcareHIPAA compliant hr and hrisHIPAA compliant identity and accessHIPAA compliant insuranceHIPAA compliant iot and devicesHIPAA compliant it managementHIPAA compliant legal techHIPAA compliant life sciences and biotechHIPAA compliant logistics and supply chainHIPAA compliant manufacturing and industrialHIPAA compliant marketingHIPAA compliant media and contentHIPAA compliant mental healthHIPAA compliant networkingHIPAA compliant no-code and automationHIPAA compliant nonprofit and fundraisingHIPAA compliant paymentsHIPAA compliant payrollHIPAA compliant procurementHIPAA compliant productivityHIPAA compliant project managementHIPAA compliant real estate and propertyHIPAA compliant recruitingHIPAA compliant research and data providersHIPAA compliant sales toolsHIPAA compliant schedulingHIPAA compliant securityHIPAA compliant telehealthHIPAA compliant translation and localizationHIPAA compliant travel and hospitalityHIPAA compliant video conferencing
Guides on HIPAA
All articlesExplainers
What Is HDS? Health Data Hosting vs Other Meanings Explained
Solomon Amos · 25 Oct 2026 · 9 min read