Skip to main content
BAA Directory

Does Amplitude sign a BAA?

The answer

Signs a BAA

Yes. Amplitude says it can enter a Business Associates Agreement, and its AI features are covered under its BAAs.

Analytics and data. Checked on the vendor's own pages on .

On this page

What Amplitude says

“Amplitude can enter a Business Associates Agreement to help you maintain your HIPAA compliance.”

Source: Amplitude, Trust, Security and Privacy, checked .

“Yes, all of Amplitude's AI features are covered under our BAAs, and Amplitude has corresponding BAAs with all of our third-party AI subprocessors.”

Source: Amplitude, Trust, Security and Privacy, checked .

What this means for ad tracking

Analytics and tag scripts run on every page, including pages about a condition, a treatment or a booking. They collect page addresses, page titles, IP addresses and device identifiers, which together can connect a person to the care they were looking for.

A BAA with Amplitude covers the data Amplitude collects for you. Audiences or conversions you export from Amplitude to an ad platform leave that BAA behind, because the ad platform has not signed it.

Curve Compliance closes that gap: it sends the conversion itself server-side, under a BAA it signs on every plan, so your campaigns keep a conversion signal without a pixel carrying patient data. Book a call to see it on your own funnel.

How Curve helps

  • Keep Amplitude for what it does well. Curve carries the conversion signal to your ad platforms separately, under its own BAA.
  • Server-side conversion tracking in place of pixels: conversions reach your ad platforms from Curve's server, not from the patient's browser.
  • PHI-like pattern detection checks every event before it goes out, and neutral event names keep conditions and treatments out of what the platforms see.
  • Identifiers are hashed with SHA-256 to each platform's requirements.
  • Consent management for your site, alongside the tracking.
  • A HIPAA-compliant setup done by Curve's team, in about a week, with a BAA signed on every plan.

Book a call with Curve and Curve's team will walk through your tracking setup with you.

Read the full guide

For the full picture on Amplitude and patient data, read Is Amplitude HIPAA Compliant? What Digital Health Teams Need to Know.

Frequently asked questions

Does Amplitude sign a BAA?

Yes. Amplitude says it can enter a Business Associates Agreement, and its AI features are covered under its BAAs. In Amplitude's words: “Amplitude can enter a Business Associates Agreement to help you maintain your HIPAA compliance.” We checked Amplitude's own pages on September 29, 2026.

Is Amplitude HIPAA compliant once the BAA is signed?

A BAA is Amplitude's commitment to protect the PHI it handles for you. How you set up Amplitude still matters, and the BAA does not reach ad platforms that receive data from your site or from Amplitude.

Does a BAA with Amplitude cover my ad pixels?

No. A BAA covers the data Amplitude handles for you. A pixel sends data from the visitor's browser straight to Meta, Google or TikTok, and none of those platforms is a party to your BAA with Amplitude.

Does Curve Compliance sign a BAA?

Yes. Curve Compliance signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup in about a week. Book a call to get started.

Sources

Last checked . Vendors change their plans and terms, so confirm the current terms with Amplitude before you send it patient data.

See every tool in the BAA Directory.

Track ad conversions under a BAA

Curve signs a BAA on every plan. Curve's team sets up HIPAA-compliant conversion tracking for you in about a week, sending conversions server-side in place of pixels.

Book a call