Independence and how we verify

We don't sell email, fax, texting or video software, and no vendor can pay to change its position in a table.

How each fact is checked

• Every fact comes from the vendor's own public pages, or from HHS for regulation. Each vendor page lists the exact URLs we read.
• "Signs a BAA" records what the vendor says publicly. If we can't find BAA terms we write "Not stated". We never guess.
• Price is the cheapest plan that includes a BAA, as published on the verification date. Where a price loads only after interaction or needs a quote, we say so.
• Certifications are listed only when the vendor names them for itself, not for its cloud provider.
• Every record carries a verification date. The dataset currently covers 26 vendors, last verified 2026-09-24.

How the site is funded

Some "Visit" links are affiliate links. When one is, the link is marked as sponsored. Tables are ordered by BAA clarity, then price, and that order is computed from the data, not set by hand.

Not legal advice

A BAA is necessary but not sufficient for HIPAA compliance. How you configure and use a tool matters too. Confirm terms with the vendor and your compliance officer before handling protected health information.