What is HIPAA?
HIPAA (US Healthcare) — US Health Insurance Portability and Accountability Act — safeguards for protected health information (PHI). Vendors typically sign a Business Associate Agreement (BAA).
Who needs HIPAA depends on your industry, geography, and customers: buyers frequently require it from vendors during procurement, and compliance is typically demonstrated through independent audits, official registries, or formal certifications. Timeframes vary — most organizations plan months, not weeks, to prepare, be audited, and certify. For exact requirements, refer to the official HIPAA program ↗.
Which tools in our directory have HIPAA?
Amplitude, CrowdStrike, Databricks, Datadog, dbt Labs, Gong, HubSpot, Monday.com, MongoDB Atlas, Okta, Outreach, Salesforce, Segment, Snowflake, Supabase, Tableau.
Additionally, 23 tools hold it partially or conditionally: Amazon Web Services, Google Cloud Platform, Microsoft Azure, Cloudflare, Vercel, Netlify, DigitalOcean, Slack, Notion, Asana, Confluence, Jira, Linear, Miro, Mixpanel, Looker, Gusto, Deel, Ramp, 1Password, Zendesk, Intercom, Twilio (per-tool conditions apply — see their profiles).
Which tools don't have HIPAA?
Apollo, Bill.com, Brex, ClickUp, Figma, GitHub, PagerDuty, Pipedrive, Rippling, SendGrid, Snyk.
"Not publicly documented" means we could not verify the status from public sources — it does not mean the vendor lacks the certification.