W
On some plansIs Wix HIPAA compliant?
Checked 6 Nov 2026 from 2 vendor sources
Wix offers a BAA to eligible US healthcare providers and their business associates on qualifying plans, signed in the dashboard after PHI protection is activated. So the answer depends on your plan. Check yours below before any patient data goes in.
| Plan or product | BAA |
|---|---|
| Plans other than the qualifying ones; Wix says it will prompt an upgrade before activation | Not covered |
| Business, Plus, Elite, Business Elite and Enterprise Premium or Studio plans, on Harmony Editor, Wix Studio Editor or Wix Headless sites | Covered |
What the BAA leaves out
- Apps not on Wix’s HIPAA-compliant list
- Non-compliant channels such as Facebook and Instagram, which must be disconnected
- Old Wix Forms, which must be deleted and rebuilt with new Wix Forms
- Notes on individual bookings, which Wix says may conflict with HIPAA
How to get the BAA
After activating PHI protection on a qualifying plan, select Sign Now next to the BAA in the site’s HIPAA Compliance settings.
What the vendor says to do
- Upgrade to a qualifying plan
- On desktop, go to HIPAA Compliance under Compliance, Privacy & Cookies
- Review the HIPAA-compliant apps list and remove others
- Select Activate PHI Protection
- Select Sign Now next to the BAA and complete it
- Limit collaborator permissions, since collaborators may see PHI
- Do not collect PHI until activation and signing are both done
Proof from the vendor
- HIPAA Compliance for Your Wix SiteQualifying plans and editors, activation and signing steps, restrictions
- HIPAA Compliant Hosting SolutionsNot HIPAA compliant by default, eligible US providers only, customer responsibilities
This isn’t legal advice. A BAA is one requirement. Your clinic still has to set the tool up correctly and control who has access. Vendors change their terms, so confirm with the vendor before you sign. PHI means protected health information, which includes patient data.