Plain HIPAA answers. No strings attached.
What the rules require, which tools sign a BAA, and what to do next — in plain English, with a source for every fact. Free and independent: we take no commissions from any vendor. We earn one way — our own HIPAA templates and staff training.
Start from your situation
What HIPAA means for your type of organization.
Compare tools and services
Who signs a BAA, on which plan, and what's left for you to configure.
- ToolAI models and chat assistants →Which AI assistants and model APIs sign a BAA, for which products and plans, and what you have to switch on before any patient information goes in.
- ToolHIPAA compliance software →Platforms that help you run a HIPAA program — policies, risk analysis, staff training and vendor BAAs in one place — compared on what they actually include and whether they publish prices.
- ToolHIPAA email services →Email services that sign a BAA, compared on what actually protects patient messages — and what you still have to configure yourself.
- ToolHIPAA hosting and cloud platforms →Cloud platforms and managed hosts that sign a BAA — and the big difference between infrastructure you secure yourself and hosting where the provider runs the safeguards for you.
How we verify
The rules behind every table on this site.
Primary sources only
Every claim links to the vendor's own BAA, trust center or pricing page — or to the regulation itself.
Dated and re-checked
Each fact shows when it was verified. Anything older than 90 days is flagged on the page.
No commissions, no partners
No vendor pays us for listings, rankings or referrals. Tables are alphabetical and every product is judged on the same criteria.
No "HIPAA compliant" labels
Tools are never compliant on their own. We say whether a BAA exists, on what terms, and what you still have to do.
Something just happened?
What to do, in order, and who can help.