How-To Guides

Monday.com is HIPAA compliant only on its Enterprise tier at custom pricing — lower tiers (Free, Basic, Standard, Pro) offer no BAA and cannot be used with PHI.

Notion is HIPAA compliant only on its Enterprise tier with custom pricing — Free, Plus ($10/user/mo), and Business ($18/user/mo) plans offer no BAA and cannot be used with PHI.

Slack is HIPAA compliant only on Enterprise Grid — custom pricing with a 250+ seat minimum that makes it inaccessible to small clinics. Here's what that means for your practice and what alternatives exist.

Trello is not HIPAA compliant. Atlassian does not offer a Business Associate Agreement for Trello on any plan, meaning Trello cannot legally be used with protected health information.

Zoom is HIPAA compliant only with a Business Plus or Enterprise plan and a signed BAA — free and Pro plans cannot be used with PHI. Video calls are one piece; task follow-up is another.

A Business Associate Agreement (BAA) is a HIPAA-required contract between your medical practice and any vendor handling patient data. Without one, you're exposed.

A BAA — Business Associate Agreement — is the HIPAA contract your practice needs before using any vendor with patient data. Quick answer and what it means for your tools.