Skip to main content
Harvey logo

Harvey

HIPAA evidence

Legal AI tailored for leading law firms and corporate legal teams

harvey.aiLegal techLast verified 2 Nov 2026
Request the report Are you Harvey?
HIPAA mark, CertReports state Vendor-stated as of 2 Nov 2026Vendor-stated

Harvey and HIPAA

Harvey states it holds that it will sign a business associate agreement. CertReports captured this on 2 Nov 2026 from its trust centre (Drata); it is a vendor statement, not an independent confirmation.

Evidence

Vendor-statedVendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 2 Nov 2026 · confidence 70%
SourceCapturedQuoteLinks
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
1 Nov 2026HIPAA
Live page Snapshotsha256 de20ba0619
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
31 Oct 2026HIPAA
Live page Snapshotsha256 aa036d0507
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
29 Oct 2026HIPAA
Live page Snapshotsha256 2bd4697d16
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
27 Oct 2026HIPAA
Live page Snapshotsha256 98f2767667
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
25 Oct 2026HIPAA
Live page Snapshotsha256 cb46888cfc
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
23 Oct 2026HIPAA
Live page Snapshotsha256 4758b4ab16
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
21 Oct 2026HIPAA
Live page Snapshotsha256 bff92eb6ad
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
19 Oct 2026HIPAA
Live page Snapshotsha256 e3e7e44701
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
17 Oct 2026HIPAA
Live page Snapshotsha256 16e8d90807
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
15 Oct 2026HIPAA
Live page Snapshotsha256 f943cb2a27
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
13 Oct 2026HIPAA
Live page Snapshotsha256 9ee4b9073e
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
11 Oct 2026HIPAA
Live page Snapshotsha256 d1c84994f7
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
9 Oct 2026HIPAA
Live page Snapshotsha256 43067d6414
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
7 Oct 2026HIPAA
Live page Snapshotsha256 b0e3c6dd8a
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
5 Oct 2026HIPAA
Live page Snapshotsha256 d6065810c0
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
3 Oct 2026HIPAA
Live page Snapshotsha256 b51fd54070
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
1 Oct 2026HIPAA
Live page Snapshotsha256 f4330de665
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
29 Sep 2026HIPAA
Live page Snapshotsha256 b2ba3c61a3
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
27 Sep 2026HIPAA
Live page Snapshotsha256 65324502f0
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
25 Sep 2026HIPAA
Live page Snapshotsha256 d61b1b1c81
Harvey trust centre (Drata)
Vendor trust centre · HTTP 200
21 Sep 2026HIPAA
Live page Snapshotsha256 1e26f58378
Harvey AI trust centre (Drata)
Vendor trust centre · HTTP 200
18 Sep 2026HIPAA
Live page Snapshotsha256 1bfbf458d9
This is wrong

What is not public

  • Whether a BAA has been signed with any particular customer is never public; CertReports records only whether the vendor offers one.
What HIPAA means, and what it does not

No HIPAA certification exists. HHS declined to create certification criteria in the Security Rule preamble (68 FR 8334, 20 February 2003). The artefact that matters is a signed business associate agreement (BAA); "HIPAA compliant" on a marketing page is a claim.

Read the HIPAA guide and browse all vendors with evidence

Questions buyers ask

Is Harvey HIPAA compliant?

There is no HIPAA certification, so no vendor can be "HIPAA certified". The artefact that matters is a business associate agreement (BAA). Harvey states it will sign a BAA as of 2 Nov 2026.

Will Harvey sign a BAA?

Yes, according to Harvey's own published terms as of 2 Nov 2026. Confirm the covered products with the vendor before sending protected health information.

How does CertReports verify this?

Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.

Change history

  1. 22 Sep 2026BAA availability changedBAA availability moved from unknown to on_request.

Alternatives with HIPAA evidence

Similar vendors (shared product tags or the Legal tech category) whose HIPAA row is verified or vendor-stated, ranked by similarity.

KLDiscovery Ontrack logo

KLDiscovery Ontrack

Legal tech

KLDiscovery delivers AI-driven eDiscovery software and services supporting litigation, investigations, and regulatory matters for legal

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedPCI DSS mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCyber Essentials mark, CertReports state Vendor-stated
1 verified · 7 stated2 Nov 2026
Ironclad logo

Ironclad

Legal tech

AI-powered contract management

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedFedRAMP mark, CertReports state VerifiedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state Verified
3 verified · 9 stated2 Nov 2026
Envoy logo

Envoy

Legal tech

We provide full-scale international legal immigration services and a proprietary online platform related to managing all employment-based

HIPAA mark, CertReports state Vendor-statedSOC 2 mark, CertReports state Vendor-statedGDPR mark, CertReports state Vendor-statedISO 27001 mark, CertReports state Vendor-statedCSA STAR mark, CertReports state VerifiedDPF mark, CertReports state Verified
2 verified · 5 stated2 Nov 2026

Understand HIPAA evidence

All articles