How we check software
Every result comes from the vendor’s own published pages. We report what they say, link to it, and show the date we read it.
What we look for
HHS guidance says a cloud vendor that handles protected health information for a clinic is a business associate, even if it can’t read the data, and needs a business associate agreement, or BAA. So the first question for any tool is whether the vendor will sign one, and on which plan.
- We read the vendor’s own pages. Trust centers, BAA terms, help articles and pricing pages. Blog posts and comparison sites can point us to a page, but they never count as proof.
- We separate the plans. A BAA on an Enterprise plan says nothing about the Free plan, so each one is listed on its own.
- We note what the BAA leaves out. AI add-ons and some features often sit outside the agreement.
- We link and date it. You can open the proof yourself and see when we last read it.
What each result means
| BAA available | The vendor says it will sign a BAA for its business customers. |
| On some plans | The vendor offers a BAA, but only on certain plans or after you request it. |
| No BAA | The vendor says it won’t sign a BAA, says the product isn’t HIPAA compliant, or says not to use it with protected health information. |
| Not stated | We couldn’t find a statement on the vendor’s own pages. That is not proof either way. Treat the tool as unsafe for patient data until the vendor confirms in writing. |
| Not clear | The vendor’s statements are limited or conflict, for example a BAA route with no stated coverage. Treat the tool as unsafe for patient data until the vendor confirms in writing. |
What a result doesn’t mean
No result here says a tool is “HIPAA compliant”. A BAA is one requirement. Your clinic still has to configure the tool correctly, control who has access, train staff and keep records of its own risk analysis.
This site is not legal advice. For a decision that matters, ask your compliance officer or a healthcare lawyer, and get the vendor’s current terms in writing.
How the work gets done
We use software, including AI tools, to gather and compare vendor documents. Each result has to trace back to a linked vendor page. If you find a result that doesn’t match the vendor’s page, tell us and we’ll recheck it.
Vendors can’t pay for a better result. Here’s how this site earns money.