All tools / Payments and accounting
Is Zelle HIPAA compliant?
Checked 6 Nov 2026 from 4 vendor sources
We found no Zelle statement on HIPAA, PHI or a BAA, including in its User Service Agreement, which says the service is for personal use except eligible small businesses at certain institutions. That isn’t proof either way. Treat it as unsafe for patient data until the vendor confirms in writing.
What we couldn’t confirm
A missing statement isn’t a refusal. Your bank’s own terms also apply, and we offer no view on how HIPAA treats payment processing.
Proof from the vendor
- Zelle User Service AgreementNo mention of HIPAA, PHI or a BAA; personal use except eligible small businesses at certain institutions
- Using Zelle with a Small Business AccountBusiness use depends on the bank or credit union offering it; no HIPAA mention
- Zelle Site Terms of UseNo HIPAA, PHI, BAA or health mention
- Zelle Website Privacy NoticeNo HIPAA, PHI, BAA or health mention
This isn’t legal advice. A BAA is one requirement. Your clinic still has to set the tool up correctly and control who has access. Vendors change their terms, so confirm with the vendor before you sign. PHI means protected health information, which includes patient data.