BAA guide

Is Dropbox HIPAA compliant?

Plan by plan, from Dropbox's own pages.

Only on a plan where the vendor signs a BAA. Dropbox is not HIPAA compliant on its own. Standard, Advanced, and Enterprise: Dropbox lists HIPAA compliance as included on this team plan, and a team admin signs the BAA electronically from the Account page in the admin console before any PHI is uploaded. Plus: no BAA. Dropbox's plan comparison marks Enable HIPAA compliance as not included on Plus. Basic (free): no BAA. Dropbox ties the BAA to Dropbox team plans, which the free Basic plan is not.

Checked against Dropbox's own pages, linked in the table.

Ask Rivvi

Ask about Dropbox.

Opens a workspace. Rivvi answers from the public guidance on this page.

Which Dropbox plans sign a BAA

PlanBAAConditionWhat the vendor page says
StandardBAA only if the condition is metDropbox lists HIPAA compliance as included on this team plan, and a team admin signs the BAA electronically from the Account page in the admin console before any PHI is uploaded.Enable HIPAA compliance ... We’re committed to helping customers subject to HIPAA/HITECH regulations safeguard protected health information (PHI).dropbox.com
AdvancedBAA only if the condition is metDropbox lists HIPAA compliance as included on this team plan, and a team admin signs the BAA electronically from the Account page in the admin console before any PHI is uploaded.Enable HIPAA compliance ... We’re committed to helping customers subject to HIPAA/HITECH regulations safeguard protected health information (PHI).dropbox.com
EnterpriseBAA only if the condition is metDropbox lists HIPAA compliance as included on this team plan, and a team admin signs the BAA electronically from the Account page in the admin console before any PHI is uploaded.Enable HIPAA compliance ... We’re committed to helping customers subject to HIPAA/HITECH regulations safeguard protected health information (PHI).dropbox.com
PlusNo BAADropbox's plan comparison marks Enable HIPAA compliance as not included on Plus.Enable HIPAA compliance ... Not includeddropbox.com
Basic (free)No BAADropbox ties the BAA to Dropbox team plans, which the free Basic plan is not.For customers subject to HIPAA/HITECH, remember that a BAA must be in place before you transfer PHI into your Dropbox account. To learn more about purchasing a Dropbox team plan, contact our sales team.help.dropbox.com

Rivvi

HIPAA BAA included

Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA, e-signed in the app before any patient data moves. The free personal plan is public information only.

Questions

Will Dropbox sign a BAA?

Yes, on team plans. Dropbox says an admin of a Dropbox team account can sign a BAA electronically from the Account page in the admin console.

Which Dropbox plans include HIPAA compliance?

Dropbox's plan comparison marks Enable HIPAA compliance as included on Standard, Advanced, and Enterprise. It is marked not included on Plus.

When does the BAA need to be signed?

Dropbox says a BAA must be in place before you transfer PHI into your Dropbox account.

Is the free Dropbox Basic plan covered?

No. Dropbox ties its BAA to Dropbox team plans, and its plan comparison also marks HIPAA compliance as not included on Plus. Rivvi is an AI workspace for healthcare teams. Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA.

Source: Dropbox's own pages, linked in the table. Checked . Last updated . How Rivvi sources data. Spot an error? hello@rivvi.ai.

Free to start. Most teams are using it the same day.

Get started for free

Try it on your own data today.

Free to start. Most teams are using it the same day.