BAA guide
Is Asana HIPAA compliant?
Plan by plan, from Asana's own pages.
Only on a plan where the vendor signs a BAA. Asana is not HIPAA compliant on its own. Enterprise+: Asana's pricing table marks HIPAA compliance as opt in on Enterprise+ only. Asana says the BAA takes effect when the customer enables the HIPAA feature under its Use Requirements. Personal: no BAA. Asana says PHI must not be submitted into any free version of Asana.
Checked against Asana's own pages, linked in the table.
Which Asana plans sign a BAA
| Plan | BAA | Condition | What the vendor page says |
|---|---|---|---|
| Enterprise+ | BAA only if the condition is met | Asana's pricing table marks HIPAA compliance as opt in on Enterprise+ only. Asana says the BAA takes effect when the customer enables the HIPAA feature under its Use Requirements. | HIPAA compliance available, see requirements ... Use Asana in compliance with the U.S. Health Insurance Portability and Accountability Act (HIPAA). ... Opt-inasana.com |
| Personal | No BAA | Asana says PHI must not be submitted into any free version of Asana. | shall not submit PHI into any free version of the Asana SaaS Services.asana.com |
Rivvi
HIPAA BAA included
Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA, e-signed in the app before any patient data moves. The free personal plan is public information only.
Questions
Does Asana sign a BAA?
Yes. Asana publishes a Business Associate Addendum. Asana says it takes effect on the date the customer enables the HIPAA feature in accordance with its HIPAA Use Requirements.
Which Asana plan includes HIPAA?
Asana's pricing table lists HIPAA compliance as an opt in feature on Enterprise+. Asana says PHI must not be submitted into any free version of Asana.
What does Asana require before we add PHI?
Asana says you must move into a single Organization, enable the HIPAA compliance feature in the admin console, and keep two factor authentication, SSO, or Google Authentication on for all users.
Do Asana AI tools work with HIPAA turned on?
Not all of them. Asana says some features may be unavailable or disabled by default once the HIPAA feature is on, including some Asana AI tools, certain third party integrations, and personal access tokens.
Related
- Is Microsoft 365 HIPAA compliant?
- Is Google Workspace HIPAA compliant?
- Is Notion HIPAA compliant?
- Is Smartsheet HIPAA compliant?
- Is Airtable HIPAA compliant?
- Is monday.com HIPAA compliant?
- BAA directory: every tool Rivvi checked
- What makes a chatbot HIPAA compliant
- HIPAA compliant AI: which tools sign a BAA
- Check another AI tool against its BAA terms
Source: Asana's own pages, linked in the table. Checked . Last updated . How Rivvi sources data. Spot an error? hello@rivvi.ai.
Free to start. Most teams are using it the same day.
Get started for free