BAA guide
Is Dropbox HIPAA compliant?
Plan by plan, from Dropbox's own pages.
Only on a plan where the vendor signs a BAA. Dropbox is not HIPAA compliant on its own. Standard, Advanced, and Enterprise: Dropbox lists HIPAA compliance as included on this team plan, and a team admin signs the BAA electronically from the Account page in the admin console before any PHI is uploaded. Plus: no BAA. Dropbox's plan comparison marks Enable HIPAA compliance as not included on Plus. Basic (free): no BAA. Dropbox ties the BAA to Dropbox team plans, which the free Basic plan is not.
Checked against Dropbox's own pages, linked in the table.
Which Dropbox plans sign a BAA
| Plan | BAA | Condition | What the vendor page says |
|---|---|---|---|
| Standard | BAA only if the condition is met | Dropbox lists HIPAA compliance as included on this team plan, and a team admin signs the BAA electronically from the Account page in the admin console before any PHI is uploaded. | Enable HIPAA compliance (marked Included for Standard, Advanced, and Enterprise): We're committed to helping customers subject to HIPAA/HITECH regulations safeguard protected health information (PHI).dropbox.com |
| Advanced | BAA only if the condition is met | Dropbox lists HIPAA compliance as included on this team plan, and a team admin signs the BAA electronically from the Account page in the admin console before any PHI is uploaded. | Enable HIPAA compliance (marked Included for Standard, Advanced, and Enterprise): We're committed to helping customers subject to HIPAA/HITECH regulations safeguard protected health information (PHI).dropbox.com |
| Enterprise | BAA only if the condition is met | Dropbox lists HIPAA compliance as included on this team plan, and a team admin signs the BAA electronically from the Account page in the admin console before any PHI is uploaded. | Enable HIPAA compliance (marked Included for Standard, Advanced, and Enterprise): We're committed to helping customers subject to HIPAA/HITECH regulations safeguard protected health information (PHI).dropbox.com |
| Plus | No BAA | Dropbox's plan comparison marks Enable HIPAA compliance as not included on Plus. | Enable HIPAA compliance | Plus: Not included | Standard: Included | Advanced: Includeddropbox.com |
| Basic (free) | No BAA | Dropbox ties the BAA to Dropbox team plans, which the free Basic plan is not. | For customers subject to HIPAA/HITECH, remember that a BAA must be in place before you transfer PHI into your Dropbox account. To learn more about purchasing a Dropbox team plan, contact our sales team.help.dropbox.com |
Rivvi
HIPAA BAA included
A HIPAA BAA is included on every plan, Free included.
Questions
Will Dropbox sign a BAA?
Yes, on team plans. Dropbox says an admin of a Dropbox team account can sign a BAA electronically from the Account page in the admin console.
Which Dropbox plans include HIPAA compliance?
Dropbox's plan comparison marks Enable HIPAA compliance as included on Standard, Advanced, and Enterprise. It is marked not included on Plus.
When does the BAA need to be signed?
Dropbox says a BAA must be in place before you transfer PHI into your Dropbox account.
Is the free Dropbox Basic plan covered?
No. Dropbox ties its BAA to Dropbox team plans, and its plan comparison also marks HIPAA compliance as not included on Plus. Rivvi is a free AI workspace for healthcare teams, and a HIPAA BAA is included.
Free to start. Most teams are using it the same day.
Get started for free