generator
BAA Mapper
HIPAA Cloud Vendor Checklist
Generate a vendor-by-vendor HIPAA BAA review checklist for cloud providers and subprocessors handling ePHI.
App & vendors
HHS notes CSPs can have BA duties even storing encrypted ePHI. Not legal advice.
Saved only in this browser — nothing is uploaded.
Restoring your last inputs…
BAA checklist
Vendor table, BAA questions, and guidance appear here.