BAA guide
Is Mailchimp HIPAA compliant?
Plan by plan, from Mailchimp's own pages.
No. Mailchimp does not offer a BAA on the plans Rivvi checked. Free, Essentials, Standard, and Premium: no BAA. Mailchimp's Data Processing Addendum defines Sensitive Data to include health information and says customers will not provide it.
Checked against Mailchimp's own pages, linked in the table.
Which Mailchimp plans sign a BAA
| Plan | BAA | Condition | What the vendor page says |
|---|---|---|---|
| Free | No BAA | Mailchimp's Data Processing Addendum defines Sensitive Data to include health information and says customers will not provide it. | Customer will not provide (or cause to be provided) any Sensitive Data to Mailchimp for processing under the Agreement, and Mailchimp will have no liability whatsoever for Sensitive Data, whether in connection with a Security Incident or otherwise.mailchimp.com |
| Essentials | No BAA | Mailchimp's Data Processing Addendum defines Sensitive Data to include health information and says customers will not provide it. | Customer will not provide (or cause to be provided) any Sensitive Data to Mailchimp for processing under the Agreement, and Mailchimp will have no liability whatsoever for Sensitive Data, whether in connection with a Security Incident or otherwise.mailchimp.com |
| Standard | No BAA | Mailchimp's Data Processing Addendum defines Sensitive Data to include health information and says customers will not provide it. | Customer will not provide (or cause to be provided) any Sensitive Data to Mailchimp for processing under the Agreement, and Mailchimp will have no liability whatsoever for Sensitive Data, whether in connection with a Security Incident or otherwise.mailchimp.com |
| Premium | No BAA | Mailchimp's Data Processing Addendum defines Sensitive Data to include health information and says customers will not provide it. | Customer will not provide (or cause to be provided) any Sensitive Data to Mailchimp for processing under the Agreement, and Mailchimp will have no liability whatsoever for Sensitive Data, whether in connection with a Security Incident or otherwise.mailchimp.com |
Rivvi
HIPAA BAA included
Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA, e-signed in the app before any patient data moves. The free personal plan is public information only.
Questions
Does Mailchimp sign a BAA?
Mailchimp's own pages describe no BAA. Its Data Processing Addendum says customers will not provide Sensitive Data, which it defines to include health information, and says the addendum does not apply to Sensitive Data.
Can we send patient information through Mailchimp?
Mailchimp's Acceptable Use Policy says not to upload sensitive personal information regulated by applicable law. Its DPA also says Mailchimp does not want to collect or process any Sensitive Data.
Who is responsible for HIPAA if we use Mailchimp?
Mailchimp's Standard Terms of Use say you are responsible for deciding whether the service suits your HIPAA obligations, and that Mailchimp won't be liable if the service doesn't meet them. Rivvi is an AI workspace for healthcare teams. Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA.
Related
- Is Zoom HIPAA compliant?
- Is Google Drive HIPAA compliant?
- Is Gmail HIPAA compliant?
- Is Microsoft Teams HIPAA compliant?
- Is Microsoft 365 HIPAA compliant?
- Is Dropbox HIPAA compliant?
- BAA directory: every tool Rivvi checked
- What makes a chatbot HIPAA compliant
- HIPAA compliant AI: which tools sign a BAA
- Check another AI tool against its BAA terms
Source: Mailchimp's own pages, linked in the table. Checked . Last updated . How Rivvi sources data. Spot an error? hello@rivvi.ai.
Free to start. Most teams are using it the same day.
Get started for free