How-to
How to Get a Business Associate Agreement Signed With a Vendor
Solomon Amos · 30 Oct 2026 · 9 min read
legal
HIPAA evidence across 231 vendors
There is no HIPAA certification. HHS declined to create certification criteria in the Security Rule preamble (68 FR 8334, 20 February 2003). The artefact that matters is a business associate agreement, so CertReports records whether a vendor offers a BAA, where it says so, and when that was captured.
- Verified rows
- 0
- Vendor-stated
- 231
- Expired
- 0
- Last verified
- 2 Nov 2026
Typeform
Form builders and surveys
Typeform is a software as a service (SaaS) company that specializes in online form building and online surveys
PAYMENTUS
Payments
Paymentus delivers secure, smart billing and payment solutions that boost engagement and on-time payments for businesses, governments
Formal
Security
Take control of your data in real-time.
Vapi
AI tools
Voice AI for developers.
Segment
Data platforms
Software and APIs to collect, clean, and control customer data.
Freshpaint
Developer tools
Customer data collection, safeguarding, & activation for healthcare
Jitterbit
No-code and automation
Ignite business productivity with data orchestration, iPaaS, workflow automation, and low-code app development solutions—all on one unified
Notion
Collaboration
Build Custom Agents, search across all your apps, and automate
Sisense
Analytics
Sisense delivers AI-powered embedded analytics to unlock insights and convert data into revenue with pro-code, low-code, and no-code
Canto
Crypto and web3
Canto is the leading digital asset management solution for organizations
Axiom
Data platforms
The modern machine data platform — Petabyte-scale, schema-less ingest on a fully managed event store, so you keep every byte without the
Dashlane
Identity and access
Top-rated password manager and credential protection solution for enterprises, businesses, and
ActivTrak
Research and data providers
ActivTrak’s work intelligence helps leaders understand how work gets done across people, tools and
WorkZone
Project management
Workzone helps teams stay organized, meet deadlines, and collaborate better with powerful, easy-to-use project management software built
Apptoto
Scheduling
Apptoto's automated appointment reminders reduce no-shows, streamline scheduling, boost client satisfaction & grow
Crucial Data Solutions
Research and data providers
TrialKit is a unified eClinical platform with embedded intelligence that helps sponsors and CROs design, build, manage, and analyze
Data Intensity
Business services
Data Intensity is an industry-leading Oracle managed services provider, expertly working to simplify, optimize, and transform our clients'
Docufree
Cloud storage
Docufree is an intelligent document processing solution designed to capture, manage, and automate information for highly-regulated
Gorgias
Customer support
Drive more sales and automate support with AI Agent, Helpdesk integrated to your stack, Chat, FAQ and
Netsoft
Productivity
Track employee time, monitor productivity, and turn approved hours into payments and
HumanSignal
AI infrastructure
Labeling, evaluation, and quality workflows that deploy where your data lives and scale with the world's most demanding AI
QLess
Scheduling
QLess streamlines queues, reduces wait times, and enhances customer experiences with smart queue management
Qumulo
Cloud storage
Store, manage, and simplify all your unstructured data and hybrid workflows in one platform, anywhere - at the edge, in the core, or in any
Salesmsg
Marketing
Business texting and calling platform for sales, marketing, and support
What "HIPAA compliant" means on a marketing page
It is a vendor claim. The verifiable facts are a BAA (public, on request or not offered), a HIPAA-mapped SOC 2 or HITRUST assessment, and the products the BAA covers.
Which products the BAA covers
Many vendors sign a BAA only for specific plans or products. Confirm the covered products with the vendor before sending protected health information.
HIPAA by category
HIPAA compliant ai assistantsHIPAA compliant ai infrastructureHIPAA compliant ai toolsHIPAA compliant analyticsHIPAA compliant automotive and mobilityHIPAA compliant banking and lendingHIPAA compliant benefits and insuranceHIPAA compliant business servicesHIPAA compliant cloud and hostingHIPAA compliant cloud storageHIPAA compliant collaborationHIPAA compliant communications and cpaasHIPAA compliant compliance and grcHIPAA compliant consumer appsHIPAA compliant crmHIPAA compliant crypto and web3HIPAA compliant customer supportHIPAA compliant data platformsHIPAA compliant design toolsHIPAA compliant developer toolsHIPAA compliant devops and observabilityHIPAA compliant e-commerceHIPAA compliant e-signatureHIPAA compliant educationHIPAA compliant ehr and practice managementHIPAA compliant email marketingHIPAA compliant energy and climateHIPAA compliant finance and accountingHIPAA compliant form builders and surveysHIPAA compliant government and public sectorHIPAA compliant healthcareHIPAA compliant hr and hrisHIPAA compliant identity and accessHIPAA compliant insuranceHIPAA compliant iot and devicesHIPAA compliant it managementHIPAA compliant legal techHIPAA compliant life sciences and biotechHIPAA compliant logistics and supply chainHIPAA compliant manufacturing and industrialHIPAA compliant marketingHIPAA compliant media and contentHIPAA compliant mental healthHIPAA compliant networkingHIPAA compliant no-code and automationHIPAA compliant nonprofit and fundraisingHIPAA compliant paymentsHIPAA compliant payrollHIPAA compliant procurementHIPAA compliant productivityHIPAA compliant project managementHIPAA compliant real estate and propertyHIPAA compliant recruitingHIPAA compliant research and data providersHIPAA compliant sales toolsHIPAA compliant schedulingHIPAA compliant securityHIPAA compliant telehealthHIPAA compliant translation and localizationHIPAA compliant travel and hospitalityHIPAA compliant video conferencing
Guides on HIPAA
All articlesExplainers
What Is HDS? Health Data Hosting vs Other Meanings Explained
Solomon Amos · 25 Oct 2026 · 9 min read