Skip to main content
BAA Directory

Is Feathery HIPAA compliant? Does it sign a BAA?

The answer

No public statement

No public statement. Feathery's security page says “Feathery is HIPAA compliant,” but we found no statement about a BAA on its own pages.

Forms and landing pages. Checked on the vendor's own pages on .

Collecting patient details in a form? Curve Forms are HIPAA-hosted intake and lead forms with the ad that brought each person attached, covered by Curve Compliance's BAA on every plan. Book a call

On this page

What we checked

We looked for a statement about a BAA on Feathery's own pages and could not find one we could quote. These are the pages we checked:

Until Feathery puts a BAA in writing for you, treat it as a tool that has not agreed to protect patient data.

What this means for ad tracking

Intake and lead forms collect what a patient types, such as the service they want, their symptoms, their insurance and how to reach them. The form tool that holds those answers needs a BAA, and the ad tags on the form page need to stay away from them.

Feathery's security page says “Feathery is HIPAA compliant” (Feathery), and its docs say “Feathery is SOC 2, HIPAA, GDPR, and PIPEDA compliant” (Feathery Docs). Neither page mentions a BAA. Ask Feathery for a signed BAA before patient answers reach it.

A BAA binds only the vendor that signs it. This directory lists Meta and Google Ads as not signing one, so form conversions sent to them need to leave PHI behind.

Curve Compliance's HIPAA intake forms, Curve Forms, are hosted by Curve under the BAA Curve signs on every plan, with ad attribution attached. Form events reach Meta, Google Ads and your other destinations server-side, and form answers are never sent. Book a call to see it on your own funnel.

A business associate agreement binds only the vendor that signs it, so each vendor that handles patient information for you needs its own. To compare form builders, see our guide to HIPAA compliant forms.

How Curve helps

  • Curve Forms are HIPAA intake and lead forms hosted by Curve under the BAA Curve signs on every plan, with ad attribution attached.
  • Curve replaces browser ad pixels with one script and sends conversions server-side to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn from Curve's servers.
  • Curve detects PHI-like patterns, such as condition names, form answers and emails in URLs, before data reaches an ad platform, and flags them so they can be stopped at the source.
  • Each platform receives only a fixed list of fields. Contact identifiers are off by default on Meta, Google Ads and TikTok, and events can use neutral names.
  • Event Logs show what Curve sent to each platform and what the platform accepted.
  • Curve signs a BAA on every plan, and Curve's team does the setup for you, typically live in about a week.

Book a call with Curve and Curve's team will walk through your tracking setup with you.

Frequently asked questions

Does Feathery sign a BAA?

No public statement. Feathery says it is HIPAA compliant, but we found no statement about a BAA on its security, docs, terms or privacy pages. We checked them on October 26, 2026.

Is Feathery HIPAA compliant?

Feathery's security page says “Feathery is HIPAA compliant” (Feathery), and its docs list HIPAA among its compliance programs. A HIPAA covered entity still needs a signed BAA from any vendor that handles its patients' information, so ask Feathery for one before you use it with patient data.

Can I use Feathery for patient intake forms?

Not with patient information until Feathery signs a BAA with you. We could not find a statement from Feathery offering one on its own pages, so ask Feathery directly and keep Protected Health Information out of its forms until a BAA is in place.

What does Curve Compliance offer for intake forms?

Curve Forms are HIPAA intake and lead forms hosted by Curve under the BAA Curve signs on every plan, with ad attribution attached. Form events reach your ad platforms server-side without form answers, and screened-out submissions send no conversion, so the platforms learn from eligible leads. Book a call to see it on your own funnel.

Does Curve Compliance sign a BAA?

Yes. Curve Compliance signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup, typically live in about a week. Book a call to get started.

Sources

Last checked . Vendors change their plans and terms, so confirm the current terms with Feathery before you send it patient data.

See every tool in the BAA Directory.

Track ad conversions under a BAA

Curve signs a BAA on every plan. Curve's team sets up HIPAA-compliant conversion tracking for you in about a week, sending conversions server-side in place of pixels.

Book a call