Skip to main content
BAA Directory

Is Profound HIPAA compliant? Does it sign a BAA?

The answer

No public statement

No public statement. Profound says it completed an independent HIPAA compliance assessment, but we found no statement about a BAA on its own pages.

Analytics and data. Checked on the vendor's own pages on .

Measuring a healthcare website? Curve Compliance includes web analytics, session replay and heatmaps under the same BAA as its HIPAA-compliant ad tracking. Book a call

On this page

What we checked

We looked for a statement about a BAA on Profound's own pages and could not find one we could quote. These are the pages we checked:

Until Profound puts a BAA in writing for you, treat it as a tool that has not agreed to protect patient data.

What this means for ad tracking

Profound announced on November 14, 2025 that it “has successfully completed an independent HIPAA compliance assessment, conducted by Sensiba LLP,” and that “HIPAA compliance is available now for all Profound enterprise customers” (Profound). Its Trust Center lists a SOC 2 Type 2 and HIPAA report (Profound Trust Center). None of the pages we checked say whether Profound signs a BAA, so ask Profound for one before any patient data reaches it.

An AI visibility tool should never need patient data. With Curve Compliance's AI Visibility, only the marketing question you track is sent to AI assistants, screened for PHI first, and never anything about a patient. Curve is SOC 2 Type II and signs a BAA on every plan. For a side-by-side view, see our Profound alternative for healthcare guide and HIPAA-compliant AI visibility tracking.

AI Visibility is a feature in Curve Compliance, and Curve also offers it as a managed service. AI Visibility shows how often AI assistants, including ChatGPT, Google AI Overviews, Google AI Mode, Perplexity, Claude and Gemini, name and cite your practice for the questions your patients ask. Book a call to see AI Visibility on your own questions, or to talk about the managed service.

A business associate agreement binds only the vendor that signs it, so each vendor that handles patient information for you needs its own.

How Curve helps

  • AI Visibility is a feature in Curve Compliance, and Curve also offers it as a managed service.
  • AI Visibility ties AI answers to the visits and bookings they bring you.
  • AI Visibility is built for healthcare: only the marketing question you track is sent to AI assistants, screened for PHI first, and never anything about a patient.
  • Curve's team can run AI Visibility for you as a managed service.
  • Curve replaces browser ad pixels with one script and sends conversions server-side to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn from Curve's servers.
  • Curve is SOC 2 Type II and signs a BAA on every plan.

Book a call with Curve and Curve's team will walk through your tracking setup with you.

Frequently asked questions

Does Profound sign a BAA?

No public statement. Profound says it completed an independent HIPAA compliance assessment, but none of the Profound pages we checked, including its Trust Center, say whether it signs a BAA. We checked them on November 9, 2026. Ask Profound directly before any patient data reaches it.

Is Profound HIPAA compliant?

Profound says it “has successfully completed an independent HIPAA compliance assessment, conducted by Sensiba LLP,” and that HIPAA compliance “is available now for all Profound enterprise customers” (Profound). A HIPAA covered entity still needs a signed BAA from any vendor that handles its patients' information, so ask Profound for one if patient data would reach it.

Does an AI visibility tool need patient data?

It shouldn't. With Curve Compliance's AI Visibility, only the marketing question you track is sent to AI assistants, screened for PHI first, and never anything about a patient. Curve is SOC 2 Type II and signs a BAA on every plan.

What does Curve's AI Visibility do?

AI Visibility is a feature in Curve Compliance, and Curve also offers it as a managed service. AI Visibility shows how often AI assistants, including ChatGPT, Google AI Overviews, Google AI Mode, Perplexity, Claude and Gemini, name and cite your practice for the questions your patients ask. Read more on AI Visibility. Book a call to see AI Visibility on your own questions, or to talk about the managed service.

Does Curve Compliance sign a BAA?

Yes. Curve Compliance signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup, typically live in about a week. Book a call to get started.

Sources

Last checked . Vendors change their plans and terms, so confirm the current terms with Profound before you send it patient data.

See every tool in the BAA Directory.

Track ad conversions under a BAA

Curve signs a BAA on every plan. Curve's team sets up HIPAA-compliant conversion tracking for you in about a week, sending conversions server-side in place of pixels.

Book a call