ona.health/blog/post/best-hipaa-compliant-practice-software

| Softr Tier / Feature Area | HIPAA Requirements & Status | |---|---| | **Free, Business, & Enterprise Tiers** | **Not HIPAA Compliant:** `Softr does not offer a HIPAA compliance program` , nor will they sign a Business Associate Agreement (BAA) on any pricing tier. | | **Administrative Safeguards** | **Partial / Missing:** While [Softr Enterprise](https://www.softr.io/enterprise) provides audit logs and custom user groups, Softr lacks formal healthcare administrative workflows, designated privacy officers, or BAA provisions. | | **Technical Safeguards** | **Supported Security, Not HIPAA:** Softr relies on 256-bit TLS encryption in transit and hosts infrastructure via AWS Datacenters which hold SOC 2 and ISO 27001 credentials. However, independent security audits do not equal legal HIPAA compliance without a BAA. | | **Physical Safeguards** | **Inherited Only:** Physical server security is managed downstream via AWS data centers, but Softr itself disclaims handling protected health information (PHI). | Critical Prohibitions & Next Steps - Do not store, transmit, or process Protected Health Information (PHI) or electronic Protected Health Information (ePHI) through any Softr application or connected frontend interface. - If your application handles patient data, medical records, or clinical workflows, you must utilize alternative application builders or backend stacks that explicitly execute a BAA. Would you like recommendations for **alternative no-code or low-code platforms** that natively support HIPAA compliance and sign a **Business Associate Agreement (BAA)**? Do not store, transmit, or process Protected Health Information (PHI) or electronic Protected Health Information (ePHI) through any Softr application or connected frontend interface. If your application handles patient data, medical records, or clinical workflows, you must utilize alternative application builders or backend stacks that explicitly execute a BAA. - Do not store, transmit, or process Protected Health Information (PHI) or electronic Protected Health Information (ePHI) through any Softr application or connected frontend interface. - If your application handles patient data, medical records, or clinical workflows, you must utilize alternative application builders or backend stacks that explicitly execute a BAA. Would you like recommendations for alternative no-code or low-code platforms that natively support HIPAA compliance and sign a Business Associate Agreement (BAA) ? Would you like recommendations for **alternative no-code or low-code platforms** that natively support HIPAA compliance and sign a **Business Associate Agreement (BAA)**? Softr is a German company that aims to provide a secure, no-code platform. Softr uses a variety of security tools and practices to... Is Softr HIPAA compliant? No, and this one is worth stating plainly because nothing on the first page of search results answers it... Best HIPAA-Compliant Software for Solo and Group Practices. HIPAA-compliant practice software for solo and group practices: the sa... Softr offers the following features: * **Security and compliance** SOC 2 Type 2 and GDPR compliance * **Uptime** 99.9% uptime * **