community.softr.io/t/2024-year-in-review-questions-answers/12213

`No, Softr is not HIPAA compliant` and the company does not sign Business Associate Agreements (BAAs). While Softr maintains [SOC 2 Type II and GDPR compliance](https://docs.softr.io/data-sources/choosing-a-data-source) for general data security, you cannot use it out-of-the-box to store or process Protected Health Information (PHI).[](https://docs.softr.io/data-sources/choosing-a-data-source) [[1]](https://docs.softr.io/data-sources/choosing-a-data-source)[[2]](https://www.knack.com/compare/knack-vs-softr-side-by-side-features-comparison/)[[3]](https://community.softr.io/t/2024-year-in-review-questions-answers/12213)Platform Security Status - **Certifications:** Softr is SOC 2 Type II and GDPR compliant. - **BAA Availability:** Softr does not sign BAAs, meaning it cannot legally host healthcare applications managing live patient records. - **Data Sources:** Compliance also depends on your backend, but even with a secure database, Softr's lack of a BAA prevents full compliance.[](https://docs.softr.io/data-sources/choosing-a-data-source) Further Exploration - Review official data connection guidelines in the Softr Help Docs. - Read user discussions regarding platform capabilities in the [Softr Community Forum](https://community.softr.io/t/hipaa-compliance-please/16808). - Check official company direction regarding requirements in the [Softr Community Q&A](https://community.softr.io/t/2024-year-in-review-questions-answers/12213).[[1]](https://community.softr.io/t/hipaa-compliance-please/16808) If you'd like, I can suggest **alternative no-code platforms** that natively support HIPAA compliance and sign BAAs. No, Softr is not HIPAA compliant and the company does not sign Business Associate Agreements (BAAs). While Softr maintains SOC 2 Type II and GDPR compliance for general data security, you cannot use it out-of-the-box to store or process Protected Health Information (PHI). To use a HIPAA compliant data source with Softr, the data source must support HIPAA compliance. Softr also has security policies a... Why it matters: Knack puts you in control of your data and workflows. Softr introduces friction, limits, and extra costs as your a... Building this platform with your feedback is incredibly important to us. We hope this helps us stay aligned on the next steps, cla... Certifications: Softr is SOC 2 Type II and GDPR compliant. BAA Availability: Softr does not sign BAAs, meaning it cannot legally host healthcare applications managing live patient records. Data Sources: Compliance also depends on your backend, but even with a secure database, Softr's lack of a BAA prevents full compliance. - **Certifications:** Softr is SOC 2 Type II and GDPR compliant. - **BAA Availability:** Softr does not sign BAAs, meaning it cannot legally host healthcare applications managing live patient records. - **Data Sources:** Compliance also depends on your backend, but even with a secure database, Softr's lack of a BAA prevents full compliance.[](https://docs.softr.io/data-sources/choosing-a-data-source) Further Exploration Review official data connection guidelines in the Softr Help Docs. Read user discussions regarding platform capabilities in the Softr Community Forum. Check official company direction regarding requirements in the Softr Community Q&A. - Review official data connection guidelines in the Softr Help Docs. - Read user discussions regarding platform capabilities in the [Softr Community Forum](https://community.softr.io/t/hipaa-compliance-please/16808). - Check official company direction regarding requirements in the [Softr Community Q&A](https://community.softr.io/t/2024-year-in-review-questions-answers/12213).[[1]](https://community.softr.io/t/hipaa-compliance-please/16808) Feature Requests bbelo August 4, 2026, 1:05pm 1 Softr, this has been asked many times - HIPAA compliance. There is a whole world o... If you'd like, I can suggest alternative no-code platforms that natively support HIPAA compliance and sign BAAs. If you'd like, I can suggest **alternative no-code platforms** that natively support HIPAA compliance and sign BAAs. What are the requirements for a HIPAA compliant website? Here we list the important elements when setting up a website for use wit...