M
Not statedIs Make HIPAA compliant?
Checked 6 Nov 2026 from 5 vendor sources
No formal Make page read states whether it signs a BAA or supports PHI. That isn’t proof either way. Treat it as unsafe for patient data until the vendor confirms in writing.
What we couldn’t confirm
We didn’t read Make’s data processing addendum, and forum posts on this topic aren’t reliable proof. Ask Make directly.
Proof from the vendor
- Master Services Agreement for Make (March 2026)No HIPAA, PHI or BAA mention
- Automation Security & ComplianceLists GDPR, SOC 2 Type II, SOC 3, ISO 27001, with no HIPAA or BAA mention
- Security at Make (PDF)No HIPAA, PHI or BAA mention
- Is make HIPAA compliant? (Make Community, February 6, 2023)Poster said HIPAA was not in place; staff status not shown
- Sign BAA for HIPAA Compliance (Make Community, December 3, 2024)Same poster said demand for HIPAA was being evaluated
This isn’t legal advice. A BAA is one requirement. Your clinic still has to set the tool up correctly and control who has access. Vendors change their terms, so confirm with the vendor before you sign. PHI means protected health information, which includes patient data.