T
On some plansIs Typeform HIPAA compliant?
Checked 6 Nov 2026 from 2 vendor sources
Typeform says it can currently provide a BAA for Enterprise or Growth Custom customers, requested through sales. So the answer depends on your plan. Check yours below before any patient data goes in.
| Plan or product | BAA |
|---|---|
| Plans other than Enterprise and Growth Custom; those customers are directed to request HIPAA pricing | Not covered |
| Enterprise | Covered |
| Growth Custom | Covered |
How to get the BAA
Enterprise or Growth Custom customers request it from sales with their organization name and Typeform account email; others use the Request HIPAA Pricing link.
Proof from the vendor
- Business Associate Agreement (BAA)Eligible plans and request process
- Typeform Enterprise PlanHIPAA listed as an Enterprise feature; other listed plans do not mention HIPAA
This isn’t legal advice. A BAA is one requirement. Your clinic still has to set the tool up correctly and control who has access. Vendors change their terms, so confirm with the vendor before you sign. PHI means protected health information, which includes patient data.