BAA guide
Is Notion HIPAA compliant?
Plan by plan, from Notion Labs's own pages.
Only on a plan where the vendor signs a BAA. Notion is not HIPAA compliant on its own. Enterprise: HIPAA compliance must be activated in Workspace settings and the BAA accepted, and Beta Services are not covered. Business, Plus, and Free: no BAA. Notion says BAA eligibility requires the Enterprise plan.
Checked against Notion's own pages, linked in the table.
Which Notion plans sign a BAA
| Plan | BAA | Condition | What the vendor page says |
|---|---|---|---|
| Enterprise | BAA only if the condition is met | HIPAA compliance must be activated in Workspace settings and the BAA accepted, and Beta Services are not covered. | To be eligible to sign Notion's BAA, you must subscribe to our Enterprise Plan. Any Beta Services are not covered by the BAA and therefore may not be used or deployed in a manner that processes protected health information.notion.com |
| Business | No BAA | Notion says BAA eligibility requires the Enterprise plan. | To be eligible to sign Notion's BAA, you must subscribe to our Enterprise Plan.notion.com |
| Plus | No BAA | Notion says BAA eligibility requires the Enterprise plan. | To be eligible to sign Notion's BAA, you must subscribe to our Enterprise Plan.notion.com |
| Free | No BAA | Notion says BAA eligibility requires the Enterprise plan. | To be eligible to sign Notion's BAA, you must subscribe to our Enterprise Plan.notion.com |
Training, retention, and access logs
- Retention
- Notion says custom data retention settings let Enterprise workspace owners control when pages are deleted from Trash, and Notion keeps database backups that can restore content from the past 30 days.
- Access logs
- Notion says Enterprise workspace owners have access to an audit log in Settings that can be exported in CSV format.
Rivvi
HIPAA BAA included
Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA, e-signed in the app before any patient data moves. The free personal plan is public information only.
Questions
Will Notion sign a BAA?
Yes, on the Enterprise plan. Notion says you must subscribe to the Enterprise plan to be eligible to sign its BAA, and that HIPAA compliance is available free of charge to Enterprise customers.
How do we turn on HIPAA compliance in Notion?
Notion says to go to Settings, then Workspace settings, then HIPAA compliance, and select Activate. You read the BAA and select Accept, and Notion sends a confirmation email.
Are Notion Free, Plus, or Business workspaces covered?
No. Notion says BAA eligibility requires the Enterprise plan.
Are Notion beta features covered by the BAA?
No. Notion says any Beta Services are not covered by the BAA and may not be used to process protected health information. Rivvi is an AI workspace for healthcare teams. Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA.
Related
- Is Microsoft 365 HIPAA compliant?
- Is Google Workspace HIPAA compliant?
- Is Smartsheet HIPAA compliant?
- Is Airtable HIPAA compliant?
- Is Asana HIPAA compliant?
- Is monday.com HIPAA compliant?
- BAA directory: every tool Rivvi checked
- What makes a chatbot HIPAA compliant
- HIPAA compliant AI: which tools sign a BAA
- Check another AI tool against its BAA terms
Source: Notion Labs's own pages, linked in the table. Checked . Last updated . How Rivvi sources data. Spot an error? hello@rivvi.ai.
Free to start. Most teams are using it the same day.
Get started for free