SaaS HIPAA, BAA, and SOC 2 Finder

QuickBooks

HIPAA: Not HIPAA compliantSOC2: Verify with vendor

QuickBooks offers SOC 2 Type II compliance and can be HIPAA compliant with specific e...

Shopify

HIPAA: Not supported for PHISOC2: Public evidence

Shopify offers a robust security framework and SOC 2 compliance, but HIPAA compliance...

Zelle

HIPAA: Unable to confirmSOC2: Verify with participating bank

Zelle, as a peer-to-peer payment service, is generally not HIPAA compliant and does n...

Salesforce

HIPAA: ConditionalSOC2: Public evidence

Salesforce offers a robust security framework and achieves SOC 2 compliance, but HIPA...

Chime

HIPAA: Unable to confirmSOC2: Verify with vendor

Chime is a neobank primarily focused on consumer banking and does not generally offer...

Outlook

HIPAA: ConditionalSOC2: Yes

Outlook.live.com offers features and configurations that can support HIPAA compliance...

Google Calendar

HIPAA: ConditionalSOC2: Public evidence

Google Calendar, as part of Google Workspace, offers a strong security foundation and...

HubSpot

HIPAA: ConditionalSOC2: Public evidence

HubSpot offers robust security features and SOC 2 Type II compliance, but HIPAA compl...

Wix

HIPAA: ConditionalSOC2: Verify with vendor

Wix offers SOC 2 Type II compliance and can be made HIPAA compliant through specific ...

ChatGPT

HIPAA: ConditionalSOC2: Public evidence

ChatGPT demonstrates a strong commitment to security with SOC 2 Type II certification...

Pro Tools

HIPAA: ConditionalSOC2: Unknown

Pro Tools, while not inherently HIPAA compliant out-of-the-box, can be used in HIPAA-...

QuickBooks Desktop

HIPAA: Unable to confirmSOC2: Verify with vendor

QuickBooks Desktop offers features and Intuit provides a BAA for eligible enterprise ...