Is Dialpad HIPAA compliant? Does it sign a BAA?
The answer
Signs a BAA on specific plans
Yes, on paid accounts. Dialpad says online BAA signing is available on all paid Dialpad accounts, and a Company Admin signs it in the Admin Portal.
Call tracking and phones. Checked on the vendor's own pages on .
Using Dialpad on a healthcare site? Curve Compliance keeps your ad tracking HIPAA-compliant around it, under a BAA on every plan. Book a call
On this page
What Dialpad says
“Online BAA signing is available on all paid Dialpad accounts.”
“To help our healthcare customers comply with the Health Insurance Portability and Accountability Act (HIPAA), we allow Company Admins to sign a Business Associate Agreement (BAA) for their company.”
“Company Admins are the only users who can sign BAAs.”
What this means for ad tracking
A phone call from an ad is often a clinic's most valuable conversion. The phone system records calls, voicemails and texts, so it holds PHI and needs a BAA. Dialpad lets a Company Admin sign its BAA online on any paid account (Dialpad).
A BAA with Dialpad covers what Dialpad handles for you. It does not reach the ad platform that receives a call conversion, and this directory lists Meta and Google Ads as not signing one, so caller details and call content should stay out of it. Our guides to HIPAA compliant phone systems and HIPAA compliant call tracking software compare BAAs by plan.
Curve Compliance helps with that part: it receives outcomes from call tracking and booking systems through incoming webhooks, credits each to the original ad click, and sends the conversion server-side under a BAA it signs on every plan. Book a call to see it on your own funnel.
A business associate agreement binds only the vendor that signs it, so each vendor that handles patient information for you needs its own.
How Curve helps
- Curve carries the conversion signal to your ad platforms separately, under its own BAA, so you can keep Dialpad for what it does well.
- Curve receives outcomes from call tracking and booking systems through incoming webhooks and credits each to the original ad click.
- Curve replaces browser ad pixels with one script and sends conversions server-side to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn from Curve's servers.
- Curve detects PHI-like patterns, such as condition names, form answers and emails in URLs, before data reaches an ad platform, and flags them so they can be stopped at the source.
- Each platform receives only a fixed list of fields. Contact identifiers are off by default on Meta, Google Ads and TikTok, and events can use neutral names.
- Event Logs show what Curve sent to each platform and what the platform accepted.
- Curve signs a BAA on every plan, and Curve's team does the setup for you, typically live in about a week.
Book a call with Curve and Curve's team will walk through your tracking setup with you.
Frequently asked questions
Is Dialpad HIPAA compliant?
Yes, on paid accounts. Dialpad says online BAA signing is available on all paid Dialpad accounts, and a Company Admin signs it in the Admin Portal. With a signed BAA, Dialpad can handle patient information for you, set up the way the vendor describes. The BAA does not cover ad pixels or tags on the same pages, because they send data to other companies.
Does Dialpad sign a BAA?
Yes, on paid accounts. In Dialpad's words: “Online BAA signing is available on all paid Dialpad accounts” (Dialpad). We checked Dialpad's own page on October 26, 2026.
How do I sign a BAA with Dialpad?
In the Dialpad Admin Portal, choose the office, select Privacy and Legal, select Sign and Review beside Business Associate Agreement for HIPAA, review the agreement and select Accept. Dialpad says “Company Admins are the only users who can sign BAAs” (Dialpad).
Does a BAA with Dialpad cover call conversions sent to Google Ads or Meta?
No. A BAA binds only Dialpad. Google Ads and Meta are listed in this directory as not signing a BAA, so caller details and call content should stay out of the call conversions they receive.
What does Curve Compliance do for ad tracking?
Curve receives outcomes from call tracking and booking systems through incoming webhooks, credits each to the original ad click, and sends the conversion to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn server-side. It detects PHI-like patterns before data reaches an ad platform. Book a call to see it on your own funnel.
Does Curve Compliance sign a BAA?
Yes. Curve Compliance signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup, typically live in about a week. Book a call to get started.
Sources
Last checked . Vendors change their plans and terms, so confirm the current terms with Dialpad before you send it patient data.
Related tools
- Does Quo (OpenPhone) sign a BAA?Signs a BAA on specific plans. Business and Scale plans; texting and integrations excluded.
- Does Nextiva sign a BAA?Signs a BAA. Covered services.
- Does RingCentral sign a BAA?Signs a BAA. Paying customers; listed services such as RingEX and RingCX.
- Does Google Voice sign a BAA?Signs a BAA on specific plans. Licensed users managed in Google Workspace.
- Does CallRail sign a BAA?Signs a BAA on specific plans. Healthcare plans.
- Does Meta sign a BAA?Does not sign a BAA. Business Tools Terms bar health information.
- Does Google Ads sign a BAA?Does not sign a BAA. Google Ads call terms disclaim HIPAA.
- Does Curve Compliance sign a BAA?Signs a BAA. Every plan: Compliance, Growth and Enterprise.
Track ad conversions under a BAA
Curve signs a BAA on every plan. Curve's team sets up HIPAA-compliant conversion tracking for you in about a week, sending conversions server-side in place of pixels.
Book a call