Is SharePoint HIPAA compliant?
Only on some plans
Only on some plans. Microsoft lists SharePoint Online among the in-scope services covered by its HIPAA Business Associate Agreement. That BAA is available by default, through the Microsoft Online Services Data Protection Addendum, to customers who are covered entities or business associates. Microsoft's HIPAA page covers its enterprise cloud services, so it applies to SharePoint Online in a Microsoft 365 business subscription.
What to use instead
Microsoft 365
BAA from the Microsoft 365 Business Basic plan · $7/mo per user
Visit Microsoft 365 (opens in a new tab)Google Workspace
BAA terms on vendor page · $8.40/mo per user
Visit Google Workspace (opens in a new tab)See also: Is OneDrive HIPAA compliant? · Is Microsoft Teams HIPAA compliant? · Is Microsoft 365 Outlook (Exchange Online) HIPAA compliant?
Sources
Last verified . General information, not legal advice.