Is Box HIPAA compliant?
Only on some plans
Only on some plans. Box says HIPAA covered entities and business associates must have an Enterprise, Enterprise Plus or Enterprise Advanced account and sign a BAA; Personal, Starter and Business accounts don't qualify. Enterprise admins can request the BAA in the Admin Console under Account & Billing, and Box emails the addendum in 3 to 5 business days.
What to use instead
Google Workspace
BAA terms on vendor page · $8.40/mo per user
Visit Google Workspace (opens in a new tab)Microsoft 365
BAA from the Microsoft 365 Business Basic plan · $7/mo per user
Visit Microsoft 365 (opens in a new tab)See also: Is Dropbox HIPAA compliant? · Is Google Drive HIPAA compliant? · Is OneDrive HIPAA compliant?
Sources
Last verified . General information, not legal advice.