{"page":"/blog/hipaa-compliant-marketing-platforms","modified":"2026-11-10","license":"https://creativecommons.org/licenses/by/4.0/","columns":["Vendor","Products the vendor names","Public BAA offer?","Conditions the vendor states","Vendor page"],"rows":[["Salesforce","Marketing Cloud Engagement; Marketing Cloud Next; Marketing Cloud Personalization","Yes","Listed as HIPAA Covered Services with service-specific restrictions; Personalization only on AWS-provisioned infrastructure; BAA through the account team","Salesforce BAA Restrictions, last updated 30 September 2026"],["Adobe","Marketo Engage; Journey Optimizer","Yes","Correct license plus a signed BAA; PHI not permitted in services not designated HIPAA-Ready","Adobe Trust Center, September 2026"],["Braze","Instances designated HIPAA-eligible","Yes","BAA \"shall apply only to PHI stored in a designated HIPAA Account\" provisioned on Braze's HIPAA cluster","Braze HIPAA BAA"],["HubSpot","Sensitive Data features in Enterprise subscriptions","Yes","Enterprise tiers only; BAA in Annex I of the Sensitive Data Terms; covers only features marked as Covered Services","HubSpot Knowledge Base, updated 5 November 2026; Sensitive Data Terms"],["Amazon Web Services","Amazon SES; Amazon Pinpoint and End User Messaging","Yes","On the HIPAA Eligible Services list; Pinpoint excludes voice messages and the WhatsApp channel","AWS HIPAA Eligible Services, last updated 15 October 2026"],["Twilio SendGrid","Email API and Marketing Campaigns","No public offer found","SendGrid does not appear on Twilio's HIPAA Eligible Services list","Twilio HIPAA Eligible Services, 30 June 2026"],["Intuit Mailchimp","Email and SMS marketing","No public offer found","Standard Terms say the customer decides whether the service suits HIPAA obligations and that Mailchimp \"won't be liable\" if it does not","Mailchimp Standard Terms, effective 10 October 2025"],["Klaviyo","Email and SMS marketing","No","Acceptable Use Policy bars storing or sending \"Protected Health Information as defined in\" HIPAA","Klaviyo Acceptable Use Policy, updated 9 April 2026"]],"sourceUrls":[["https://www.salesforce.com/company/legal/business-associate-addendum-restrictions/"],["https://www.adobe.com/trust/compliance/hipaa-hds/hipaa-ready.html"],["https://www.braze.com/company/legal/baa"],["https://knowledge.hubspot.com/account-security/store-sensitive-data","https://legal.hubspot.com/sensitive-data-terms"],["https://aws.amazon.com/compliance/hipaa-eligible-services-reference/"],["https://twil.io/HIPAA-eligible-products-and-services"],["https://mailchimp.com/legal/terms/"],["https://www.klaviyo.com/legal/acceptable-use-policy"]]}