BAA guide
Is Microsoft Azure HIPAA compliant?
Plan by plan, from Microsoft's own pages.
Only on a plan where the vendor signs a BAA. Microsoft Azure is not HIPAA compliant on its own. In-scope Azure services: Microsoft says the BAA is part of the Microsoft Product Terms by default for covered entities and business associates, and applies to in-scope Azure services.
Checked against Microsoft Azure's own pages, linked in the table.
Which Microsoft Azure plans sign a BAA
| Plan | BAA | Condition | What the vendor page says |
|---|---|---|---|
| In-scope Azure services | BAA only if the condition is met | Microsoft says the BAA is part of the Microsoft Product Terms by default for covered entities and business associates, and applies to in-scope Azure services. | There is no separate contract to sign to enter into a HIPAA Business Associate Agreement (BAA) with Microsoft because the HIPAA BAA is available via the Microsoft Product Terms (formerly Online Services Terms) by default to all customers who are covered entities or business associates under HIPAA.learn.microsoft.com |
Rivvi
HIPAA BAA included
Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA, e-signed in the app before any patient data moves. The free personal plan is public information only.
Questions
Does Microsoft sign a BAA for Azure?
Yes. Microsoft says it offers a HIPAA BAA as part of the Microsoft Product Terms to all customers who are covered entities or business associates, for use of in-scope Azure services.
Do we need to sign a separate BAA for Azure?
No. Microsoft says there is no separate contract to sign, because the HIPAA BAA is available through the Microsoft Product Terms by default.
Does the BAA make our Azure workloads compliant?
No. Microsoft says using Azure does not automatically make your solutions compliant, and your organization is responsible for its own compliance program.
Can Microsoft sign our own BAA template?
No. Microsoft says it can't use a customer's BAA.
Related
- Is Amazon Web Services HIPAA compliant?
- Is Zoom HIPAA compliant?
- Is Google Drive HIPAA compliant?
- Is Gmail HIPAA compliant?
- Is Microsoft Teams HIPAA compliant?
- Is Microsoft 365 HIPAA compliant?
- BAA directory: every tool Rivvi checked
- What makes a chatbot HIPAA compliant
- HIPAA compliant AI: which tools sign a BAA
- Check another AI tool against its BAA terms
Source: Microsoft's own pages, linked in the table. Checked . Last updated . How Rivvi sources data. Spot an error? hello@rivvi.ai.
Free to start. Most teams are using it the same day.
Get started for free