How-to
How to Get a Business Associate Agreement Signed With a Vendor
Solomon Amos · 30 Oct 2026 · 9 min read
legal
HIPAA evidence across 231 vendors
There is no HIPAA certification. HHS declined to create certification criteria in the Security Rule preamble (68 FR 8334, 20 February 2003). The artefact that matters is a business associate agreement, so CertReports records whether a vendor offers a BAA, where it says so, and when that was captured.
- Verified rows
- 0
- Vendor-stated
- 231
- Expired
- 0
- Last verified
- 1 Nov 2026
Cerebrium
AI tools
Serverless Infrastructure Platform for AI
SU
Supabase
Developer tools
Build in a weekend. Scale to millions.
HE
Heroku
Cloud and hosting
Enabling developers to build and run applications in the cloud.
Dashworks
Productivity
Your team's intelligent start page.
Datafold
Data platforms
Automating manual and repetitive data engineering tasks with AI
Datasaur
Compliance and GRC
Datasaur builds private AI/agents for enterprise/government
Deepnote
AI tools
A better data science notebook.
Deeptrace
AI tools
AI agents for on-call
Dime
Healthcare
Dime automates administrative busywork at healthcare clinics
Disclo
HR and HRIS
Health disclosure and accommodation management platform
Encord
AI tools
The data layer for physical AI
FurtherAI
Insurance
AI Workforce for the Insurance Industry
GrowthBook
Developer tools
Open source feature flagging and A/B testing
Hey Revia
Healthcare
Voice AI to automate complex phone calls for healthcare providers
Infisical
Developer tools
Security infrastructure for developers and agents
Invofox
Finance and accounting
Invofox is the document parsing and data extraction API for software…
Kombo
Recruiting
Unified API for HR, payroll and recruiting software
LanceDB
AI tools
Open-source, serverless vectordb for production-scale generative AI
Leena AI
AI tools
We at Leena AI build a virtual assistant that answers employee's…
Medplum
Developer tools
API first electronic health record (EHR) that is open source
Mem0
Developer tools
The Memory layer for AI Agents
Openlayer
AI tools
The fastest way to ship airtight AI
Quo fka OpenPhone
AI tools
The all-in-one business phone for teams.
Qventus
AI tools
We automate operations for hospitals and health systems
What "HIPAA compliant" means on a marketing page
It is a vendor claim. The verifiable facts are a BAA (public, on request or not offered), a HIPAA-mapped SOC 2 or HITRUST assessment, and the products the BAA covers.
Which products the BAA covers
Many vendors sign a BAA only for specific plans or products. Confirm the covered products with the vendor before sending protected health information.
HIPAA by category
HIPAA compliant ai assistantsHIPAA compliant ai infrastructureHIPAA compliant ai toolsHIPAA compliant analyticsHIPAA compliant automotive and mobilityHIPAA compliant banking and lendingHIPAA compliant benefits and insuranceHIPAA compliant business servicesHIPAA compliant cloud and hostingHIPAA compliant cloud storageHIPAA compliant collaborationHIPAA compliant communications and cpaasHIPAA compliant compliance and grcHIPAA compliant consumer appsHIPAA compliant crmHIPAA compliant crypto and web3HIPAA compliant customer supportHIPAA compliant data platformsHIPAA compliant design toolsHIPAA compliant developer toolsHIPAA compliant devops and observabilityHIPAA compliant e-commerceHIPAA compliant e-signatureHIPAA compliant educationHIPAA compliant ehr and practice managementHIPAA compliant email marketingHIPAA compliant energy and climateHIPAA compliant finance and accountingHIPAA compliant form builders and surveysHIPAA compliant government and public sectorHIPAA compliant healthcareHIPAA compliant hr and hrisHIPAA compliant identity and accessHIPAA compliant insuranceHIPAA compliant iot and devicesHIPAA compliant it managementHIPAA compliant legal techHIPAA compliant life sciences and biotechHIPAA compliant logistics and supply chainHIPAA compliant manufacturing and industrialHIPAA compliant marketingHIPAA compliant media and contentHIPAA compliant mental healthHIPAA compliant networkingHIPAA compliant no-code and automationHIPAA compliant nonprofit and fundraisingHIPAA compliant paymentsHIPAA compliant payrollHIPAA compliant procurementHIPAA compliant productivityHIPAA compliant project managementHIPAA compliant real estate and propertyHIPAA compliant recruitingHIPAA compliant research and data providersHIPAA compliant sales toolsHIPAA compliant schedulingHIPAA compliant securityHIPAA compliant telehealthHIPAA compliant translation and localizationHIPAA compliant travel and hospitalityHIPAA compliant video conferencing
Guides on HIPAA
All articlesExplainers
What Is HDS? Health Data Hosting vs Other Meanings Explained
Solomon Amos · 25 Oct 2026 · 9 min read