BAA guide
Is Notion HIPAA compliant?
Plan by plan, from Notion's own pages.
Only on a plan where the vendor signs a BAA. Notion is not HIPAA compliant on its own. Enterprise: A workspace owner must activate HIPAA compliance in workspace settings and accept the BAA, and Beta Services are not covered. Business, Plus, and Free: no BAA. Notion says BAA eligibility requires the Enterprise plan.
Checked against Notion's own pages, linked in the table.
Which Notion plans sign a BAA
| Plan | BAA | Condition | What the vendor page says |
|---|---|---|---|
| Enterprise | BAA only if the condition is met | A workspace owner must activate HIPAA compliance in workspace settings and accept the BAA, and Beta Services are not covered. | To be eligible to sign Notion's BAA, you must subscribe to our Enterprise Plan. Any Beta Services are not covered by the BAA and therefore may not be used or deployed in a manner that processes protected health information.notion.com |
| Business | No BAA | Notion says BAA eligibility requires the Enterprise plan. | To be eligible to sign Notion's BAA, you must subscribe to our Enterprise Plan.notion.com |
| Plus | No BAA | Notion says BAA eligibility requires the Enterprise plan. | To be eligible to sign Notion's BAA, you must subscribe to our Enterprise Plan.notion.com |
| Free | No BAA | Notion says BAA eligibility requires the Enterprise plan. | To be eligible to sign Notion's BAA, you must subscribe to our Enterprise Plan.notion.com |
Training, retention, and access logs
- Retention
- Notion says custom data retention settings let Enterprise workspace owners control when pages are deleted from Trash, and Notion keeps database backups that can restore content from the past 30 days.
- Access logs
- Notion says Enterprise workspace owners have access to an audit log in Settings that can be exported in CSV format.
Rivvi
HIPAA BAA included
Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA, e-signed in the app before any patient data moves. The free personal plan is public information only.
Questions
Will Notion sign a BAA?
Yes, on the Enterprise plan. Notion says you must subscribe to the Enterprise plan to be eligible to sign its BAA, and that HIPAA compliance is available free of charge to Enterprise customers.
How do we turn on HIPAA compliance in Notion?
Notion says to go to Settings, then Workspace settings, then HIPAA compliance, and select Activate. You read the BAA and select Accept, and Notion sends a confirmation email.
Are Notion Free, Plus, or Business workspaces covered?
No. Notion says BAA eligibility requires the Enterprise plan.
Are Notion beta features covered by the BAA?
No. Notion says any Beta Services are not covered by the BAA and may not be used to process protected health information. Rivvi is a free AI workspace for healthcare teams, and a HIPAA BAA is included.
Free to start. Most teams are using it the same day.
Get started for free