Is JENTIS HIPAA compliant? Does it sign a BAA?
The answer
No public statement
No public statement. JENTIS says its server-side tracking makes HIPAA compliance easy, but we found no statement about a BAA on its own pages.
HIPAA ad tracking. Checked on the vendor's own pages on .
Using JENTIS on a healthcare site? Curve Compliance keeps your ad tracking HIPAA-compliant around it, under a BAA on every plan. Book a call
On this page
What we checked
We looked for a statement about a BAA on JENTIS's own pages and could not find one we could quote. These are the pages we checked:
- JENTIS blog, HIPAA Compliance with JENTIS Server-side Tracking
- JENTIS, Privacy controls
- JENTIS, Privacy compliance
- JENTIS, For DPOs and legal teams
- JENTIS Terms & Conditions
Until JENTIS puts a BAA in writing for you, treat it as a tool that has not agreed to protect patient data.
What this means for ad tracking
Analytics and tag scripts run on every page, including pages about a condition, a treatment or a booking. They collect page addresses, page titles, IP addresses and device identifiers, which together can connect a person to the care they were looking for.
JENTIS sells server-side tracking. Its HIPAA article, dated January 7, 2026, says “Advanced server-side tracking by JENTIS makes compliance with HIPAA and other regulations affecting the healthcare industry easy” (JENTIS). The article names no business associate agreement, and neither do the JENTIS privacy and legal pages we checked.
If data from your site that could be PHI will reach JENTIS, ask JENTIS for a signed BAA before it does. A BAA binds only the vendor that signs it, and this directory lists Meta and Google Ads as not signing one, so events sent on to them need to leave PHI behind. Our guide to HIPAA-compliant server-side tracking tools compares the options.
Curve Compliance closes that gap: it sends the conversion itself server-side under a BAA it signs on every plan, sends each platform only a fixed list of fields, and detects PHI-like patterns before data reaches an ad platform. Book a call to see it on your own funnel.
A business associate agreement binds only the vendor that signs it, so each vendor that handles patient information for you needs its own.
How Curve helps
- Curve gives you a conversion signal that does not depend on JENTIS or a browser pixel carrying patient details.
- Curve replaces browser ad pixels with one script and sends conversions server-side to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn from Curve's servers.
- Curve detects PHI-like patterns, such as condition names, form answers and emails in URLs, before data reaches an ad platform, and flags them so they can be stopped at the source.
- Each platform receives only a fixed list of fields. Contact identifiers are off by default on Meta, Google Ads and TikTok, and events can use neutral names.
- Event Logs show what Curve sent to each platform and what the platform accepted.
- Curve signs a BAA on every plan, and Curve's team does the setup for you, typically live in about a week.
Book a call with Curve and Curve's team will walk through your tracking setup with you.
Frequently asked questions
Does JENTIS sign a BAA?
No public statement. We found no statement about a BAA on JENTIS's own HIPAA, privacy and legal pages. We checked them on October 26, 2026.
Is JENTIS HIPAA compliant?
JENTIS says its server-side tracking “makes compliance with HIPAA and other regulations affecting the healthcare industry easy” (JENTIS). We found no BAA statement on its pages, so ask JENTIS directly and keep Protected Health Information out of JENTIS until a BAA is in place.
What should I ask JENTIS before using it on a healthcare site?
Ask whether JENTIS will sign a BAA with you, which services that BAA would cover, and which fields each destination receives from your setup. Until a BAA is in place, keep Protected Health Information out of what reaches JENTIS.
How does Curve Compliance help with server-side tracking?
Curve's team sets up server-side conversion tracking for you, typically live in about a week. Curve sends conversions to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn from its own servers, detects PHI-like patterns before data reaches an ad platform, and shows in Event Logs what each platform accepted. Book a call to see it on your own funnel.
Does Curve Compliance sign a BAA?
Yes. Curve Compliance signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup, typically live in about a week. Book a call to get started.
Sources
- JENTIS blog, HIPAA Compliance with JENTIS Server-side Tracking
- JENTIS, Privacy controls
- JENTIS, Privacy compliance
- JENTIS, For DPOs and legal teams
- JENTIS Terms & Conditions
Last checked . Vendors change their plans and terms, so confirm the current terms with JENTIS before you send it patient data.
Related tools
- Does Stape sign a BAA?Signs a BAA on specific plans. Custom plan.
- Does Tealium sign a BAA?Signs a BAA. HIPAA customers in Healthcare and Pharma.
- Does Cloudflare Zaraz sign a BAA?Signs a BAA on specific plans. Enterprise customers.
- Does Google Tag Manager sign a BAA?No public statement. Use Policy bars personally identifying data.
- Does Twilio Segment sign a BAA?Signs a BAA on specific plans. Business Tier plan.
- Does Meta sign a BAA?Does not sign a BAA. Business Tools Terms bar health information.
- Does Google Ads sign a BAA?Does not sign a BAA. Google Ads call terms disclaim HIPAA.
- Does Curve Compliance sign a BAA?Signs a BAA. Every plan: Compliance, Growth and Enterprise.
Track ad conversions under a BAA
Curve signs a BAA on every plan. Curve's team sets up HIPAA-compliant conversion tracking for you in about a week, sending conversions server-side in place of pixels.
Book a call