Is It HIPAA Compliant? — Vendor Directory | unnus

Software does not become HIPAA compliant because a pricing page says “secure.” A medical practice needs to know whether the vendor will sign a Business Associate Agreement (BAA), which plan and products that agreement covers, and what settings must be changed before protected health information enters the system.

This directory checks those details against official vendor sources only: product documentation, help centers, trust pages, legal terms, and published BAA guidance. Each review links to its sources and shows when the facts were last verified. If a vendor does not currently publish a clear answer, we do not fill the gap with a guess.

A conditional verdict means the tool can fit a compliant workflow only within documented limits. The BAA may require a specific paid plan, apply to only part of a suite, depend on a healthcare configuration, or require you to keep PHI out of certain features. Even a positive verdict is not a certification of your practice. Your contract, account settings, staff access, connected apps, and actual data flow still matter.

Use these reviews to narrow your vendor questions, then confirm the current terms with the vendor and the people responsible for your legal, privacy, and security decisions.