Skip to main content
BAA Directory

Is Liine HIPAA compliant? Does it sign a BAA?

The answer

Signs a BAA

Yes. Liine's terms of service attach a HIPAA Business Associate Addendum that applies when your content includes protected health information.

Call tracking and phones. Checked on the vendor's own pages on .

Using Liine on a healthcare site? Curve Compliance keeps your ad tracking HIPAA-compliant around it, under a BAA on every plan. Book a call

On this page

What Liine says

“If and to the extent you are a “covered entity” or a “business associate” and your Content includes “protected health information,” as those terms are defined in 45 CFR § 160.103, the HIPAA Business Associate Addendum (“BAA”) attached as Exhibit A hereto will apply to Liine’s provision and your use of the Software and Services”

Source: Liine Terms of Service, section 7.3, checked .

“you specifically represent and warrant that you are aware of, are in compliance with, and will remain in compliance with the U.S. Department of Health and Human Services current guidance on the use of online tracking and related technologies by HIPAA covered entities and business associates”

Source: Liine Terms of Service, section 7.4, checked .

“Liine is fully HIPAA-compliant and maintains SOC 2 Type II attestation through robust annual audits and ongoing, third-party verification.”

Source: Liine homepage, data security, checked .

What the BAA covers and excludes

Covers, in Liine's words:

  • "Covered Services means Liine’s performance of the Services and provision of the Software in accordance with the Agreement." (Exhibit A, section 1.1)

Excludes or limits, in Liine's words:

  • "You agree that the BAA will apply only to systems that Liine controls and operates to provide the Services, and only when you have applied the required configuration settings, if any, that Liine makes known to you in writing from time to time."
  • "You further agree that the BAA will not apply to, and Liine will have no responsibility for, any third-party applications, systems, devices, or communications networks that you or others use to transmit your Content to or from, or otherwise communicate with, the Services"
  • "Liine does not act as, nor have the obligations of, a “business associate,” as defined in 45 CFR § 160.103, with respect to your Content when you send it to or from locations or recipients outside the Services."

What this means for ad tracking

A phone call or an online booking from an ad is often a clinic's most valuable conversion. Liine describes its product as AI call tracking, marketing analytics and ad optimization, and says it uses call tracking, webforms and integrations with online scheduling platforms to capture new patient interactions (Liine).

Liine's BAA is built into its terms of service as Exhibit A. The same terms say it applies only to systems Liine controls and operates, only once you have applied any configuration settings Liine gives you in writing, and not to content you send to recipients outside Liine's services (Liine Terms of Service). Ask Liine which settings apply to your account.

Liine's terms also ask you to warrant that you follow HHS's current guidance on online tracking technologies. A BAA binds only the vendor that signs it, and this directory lists Meta and Google Ads as not signing one, so call and booking conversions sent to them need to leave PHI behind. Our guide to HIPAA compliant call tracking software compares BAAs by plan.

Curve Compliance helps with that part: it receives outcomes from call tracking and booking systems through incoming webhooks, credits each to the original ad click, and sends the conversion server-side under a BAA it signs on every plan. See how Curve handles booked appointment attribution, or book a call to see it on your own funnel.

A business associate agreement binds only the vendor that signs it, so each vendor that handles patient information for you needs its own.

How Curve helps

  • Curve carries the conversion signal to your ad platforms separately, under its own BAA, so you can keep Liine for what it does well.
  • Curve receives outcomes from call tracking and booking systems through incoming webhooks and credits each to the original ad click.
  • Curve replaces browser ad pixels with one script and sends conversions server-side to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn from Curve's servers.
  • Curve detects PHI-like patterns, such as condition names, form answers and emails in URLs, before data reaches an ad platform, and flags them so they can be stopped at the source.
  • Each platform receives only a fixed list of fields. Contact identifiers are off by default on Meta, Google Ads and TikTok, and events can use neutral names.
  • Event Logs show what Curve sent to each platform and what the platform accepted.
  • Curve signs a BAA on every plan, and Curve's team does the setup for you, typically live in about a week.

Book a call with Curve and Curve's team will walk through your tracking setup with you.

Frequently asked questions

Does Liine sign a BAA?

Yes. Liine's terms of service attach a HIPAA Business Associate Addendum as Exhibit A, which applies when you are a covered entity or business associate and your content includes protected health information (Liine Terms of Service). We checked Liine's own terms on October 26, 2026.

Is Liine HIPAA compliant?

Liine says it “is fully HIPAA-compliant and maintains SOC 2 Type II attestation” (Liine). Its BAA applies only to systems Liine controls and operates, and only once you have applied any configuration settings Liine gives you in writing (Liine Terms of Service).

Does Liine's BAA cover Google Ads or Meta?

No. Liine's terms say the BAA does not apply to third-party applications or systems used to send your content to or from Liine, and that Liine is not a business associate for content you send to recipients outside its services (Liine Terms of Service). This directory lists Meta and Google Ads as not signing a BAA, so conversions sent to them need to leave PHI behind.

What do Liine's terms say about HHS tracking guidance?

Section 7.4 asks you to “represent and warrant that you are aware of, are in compliance with, and will remain in compliance with the U.S. Department of Health and Human Services current guidance on the use of online tracking and related technologies by HIPAA covered entities and business associates” (Liine Terms of Service). Talk to your counsel about what that means for your site.

How does Curve Compliance track calls and bookings?

Curve receives outcomes from call tracking and booking systems through incoming webhooks, credits each to the original ad click, and sends the conversion to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn server-side. It detects PHI-like patterns before data reaches an ad platform. Book a call to see it on your own funnel.

Does Curve Compliance sign a BAA?

Yes. Curve Compliance signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup, typically live in about a week. Book a call to get started.

Sources

Last checked . Vendors change their plans and terms, so confirm the current terms with Liine before you send it patient data.

See every tool in the BAA Directory.

Track ad conversions under a BAA

Curve signs a BAA on every plan. Curve's team sets up HIPAA-compliant conversion tracking for you in about a week, sending conversions server-side in place of pixels.

Book a call