Skip to main content
BAA Directory

Does Elevar (now Audiense Online) sign a BAA?

The answer

No public statement

No public statement offering a BAA. Elevar is now Audiense Online, and its terms say customers will not provide Audiense with PHI as HIPAA defines it.

Analytics and data. Checked on the vendor's own pages on .

Measuring a healthcare website? Curve Compliance includes web analytics, session replay and heatmaps under the same BAA as its HIPAA-compliant ad tracking. Book a call

On this page

What Audiense says

“Audiense Online is powered by Elevar”

Source: Audiense Online product page (getelevar.com redirects here), checked .

“(c) Protected Health Information (“PHI”) (as the term is defined in the Health Insurance Portability and Accountability Act of 1996 (as amended, superseded or replaced) or Consumer Health Data (as defined in the Washington My Health My Data Act)”

Source: Audiense Online Terms & Conditions, Customer's Representations and Warranties (data you will not provide Audiense), checked .

“except for Business Associate Agreements (“BAAs”) governing Audiense’s obligations with respect to Protected Health Information”

Source: Audiense Online Terms & Conditions, section 10.6, checked .

What this means for ad tracking

Elevar is now Audiense Online. Elevar's old address, getelevar.com, redirects to Audiense's Audiense Online page, which says “Audiense Online is powered by Elevar.” Audiense's brand announcement says the new brand “brings its three companies, Buxton, Elevar and Audiense, together under one name,” and that “Elevar will become an Audiense product name.”

Audiense describes Elevar as a “server-side conversion tracking and identity solution,” used “via our Shopify App, or Elevar API.” Analytics and tag scripts run on every page, including pages about a condition, a treatment or a booking. They collect page addresses, page titles, IP addresses and device identifiers, which together can connect a person to the care they were looking for.

Audiense Online's terms list data “You will not provide Audiense with,” and the list includes Protected Health Information as HIPAA defines it and Consumer Health Data under Washington's My Health My Data Act. The same terms mention BAAs once, as an exception in the clause on Audiense's license to customer data: “except for Business Associate Agreements (“BAAs”) governing Audiense’s obligations with respect to Protected Health Information.” They don't say which customers can get a BAA, and we found none offered on Audiense's DPA or security pages, so ask Audiense in writing before any patient information reaches Audiense Online.

Without a BAA, Audiense Online should stay off pages where a visit could reveal a condition, a treatment or a booking. Those are also the pages that produce your best conversion signals, so the signals need another route to your ad platforms. This directory lists Meta and Google Ads as not signing a BAA, so the conversion has to reach them without health information. See which ad platforms sign a BAA. Selling through Shopify? See Does Shopify sign a BAA?

Curve Compliance helps with that part: it sends the conversion itself server-side under a BAA it signs on every plan, sends each platform only a fixed list of fields, and detects PHI-like patterns before data reaches an ad platform. Book a call to see it on your own funnel.

A business associate agreement binds only the vendor that signs it, so each vendor that handles patient information for you needs its own.

How Curve helps

  • Curve's team does the HIPAA-compliant setup for you, typically live in about a week, under a BAA Curve signs on every plan.
  • Curve replaces browser ad pixels with one script and sends conversions server-side to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn from Curve's servers.
  • Curve detects PHI-like patterns, such as condition names, form answers and emails in URLs, before data reaches an ad platform, and flags them so they can be stopped at the source.
  • Each platform receives only a fixed list of fields. Contact identifiers are off by default and SHA-256 hashed when enabled, and events can use neutral names.
  • Event Logs show what Curve sent to each platform and what the platform accepted.

Book a call with Curve and Curve's team will walk through your tracking setup with you.

Read the full guide

For the full picture on Elevar (now Audiense Online) and patient data, read Switching From Elevar: A Guide for Telehealth Brands.

Frequently asked questions

Is Elevar (now Audiense Online) HIPAA compliant?

Audiense Online's terms say customers will not provide Audiense with Protected Health Information as HIPAA defines it, and we found no BAA offered on Audiense's own pages. Without a BAA, Audiense Online should not receive patient information.

Does Elevar sign a BAA?

We could not find a statement on Audiense's own pages offering a BAA for Audiense Online, the product Elevar became. Its terms list data “You will not provide Audiense with,” including “(c) Protected Health Information (“PHI”) (as the term is defined in the Health Insurance Portability and Accountability Act of 1996 (as amended, superseded or replaced) or Consumer Health Data (as defined in the Washington My Health My Data Act).” We checked Audiense's own pages on October 26, 2026.

Is Elevar still a separate company?

Elevar is now part of Audiense, and the product is offered as Audiense Online. Audiense says its new brand brings “its three companies, Buxton, Elevar and Audiense, together under one name,” and its DPA names “Audiense, LLC with its subsidiaries Elevar, LLC and Audiense, LTD.” Elevar's old site, getelevar.com, now redirects to the Audiense Online page.

Can a telehealth brand on Shopify use Elevar?

Not with patient information. Audiense Online's terms bar customers from providing Protected Health Information, and they don't say which customers can get a BAA. Ask Audiense in writing, and send the conversions from intake and checkout pages server-side through a service that signs a BAA with you. Talk to your counsel about how this applies to your store.

How do I switch from Elevar without losing attribution?

Curve's team sets up server-side conversion tracking to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn, typically live in about a week. Curve's Campaign Reporting puts Meta and Google Ads spend next to Curve-tracked conversions per campaign, with five attribution models and a list of the conversions behind any number. Our guide to switching from Elevar walks through the move.

Does Curve Compliance sign a BAA?

Yes. Curve Compliance signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup, typically live in about a week. Book a call to get started.

Sources

Last checked . Vendors change their plans and terms, so confirm the current terms with Audiense before you send it patient data.

See every tool in the BAA Directory.

Track ad conversions under a BAA

Curve signs a BAA on every plan. Curve's team sets up HIPAA-compliant conversion tracking for you in about a week, sending conversions server-side in place of pixels.

Book a call