BAA checker for practice tools
This checker is for cash-pay practice owners who want to know which of their tools will sign a business associate agreement (BAA). Tick the tools you use. You get the ones that sign a BAA and on which plan, the ones that don't, and what to keep out of each, with the vendor source.
What the results mean
A BAA is the contract HIPAA requires before a vendor can create, receive, store or send protected health information for your practice. Without one, the tool should never hold patient details, even if its marketing says it is secure.
Each tool lands in one of five groups:
- Signs a BAA. The vendor offers one on the plan named. Sign it before any patient detail goes in, and turn on the settings the vendor lists.
- Enterprise plan only. The vendor signs a BAA, but only on its top or custom-priced plan. On a lower plan, treat it as a tool with no BAA.
- Paid add-on. The BAA comes with an extra product or add-on you have to buy and switch on.
- No BAA. Keep patient details out. Use the tool for practice-side work only, or switch to one that signs.
- Not clear. The vendor's public pages don't settle it. Ask the vendor in writing before you use it with patients.
Signing a BAA is necessary but not enough. You still need to set the tool up correctly, limit who can see patient data, and send only what each step needs. Our HIPAA tool stack guide shows how the pieces fit together for a solo practice.
Vendors change plans and terms. Each row shows the date we last checked the vendor's own page, so you can see how fresh it is.
Common questions
Does a BAA make a tool HIPAA compliant?
No tool is compliant on its own. A signed BAA lets you use the tool with patient data, but you are still responsible for using the right plan, settings and access controls.
What should I do with a tool that doesn't sign a BAA?
Keep patient names tied to health details, intake answers, lab information and appointment reasons out of it. Use it for marketing to the public or internal tasks, or move that step to a tool that signs.
Does this checker store what I tick?
No. The list loads into your browser and the results are worked out there. Nothing you select is sent or saved.
How often is the vendor list checked?
Each row shows the date we last checked that vendor's own BAA or HIPAA page. Vendors change their terms, so confirm with the vendor before you rely on it.