Does Slack sign a BAA?
The answer
Signs a BAA on specific plans
Yes, on an Enterprise-level Slack plan with the Slack HIPAA Enabled SKU.
Automation and workspace. Checked on the vendor's own pages on .
On this page
What Slack says
“Enterprise-Level Slack Plan. Customer must purchase an Enterprise-Level Slack plan. (Please note that GovGrid plans are not currently eligible for BAA coverage.)”
“On or after March 20, 2023, Customer must purchase the “Slack - HIPAA Enabled” SKU, along with a covered enterprise plan.”
What the BAA covers and excludes
Excludes or limits, in Slack's words:
- "Please note that GovGrid plans are not currently eligible for BAA coverage."
What this means for ad tracking
Marketing teams share lead alerts, form notifications and campaign reports in Slack, and those alerts often include a patient's name next to the service they asked about.
A BAA with Slack covers those messages on an eligible plan. It does not cover ad platforms, so the conversion signal your campaigns learn from needs its own route.
Curve Compliance closes that gap: it sends the conversion itself server-side, under a BAA it signs on every plan, so your campaigns keep a conversion signal without a pixel carrying patient data. Book a call to see it on your own funnel.
How Curve helps
- Keep Slack for what it does well. Curve carries the conversion signal to your ad platforms separately, under its own BAA.
- Server-side conversion tracking in place of pixels: conversions reach your ad platforms from Curve's server, not from the patient's browser.
- PHI-like pattern detection checks every event before it goes out, and neutral event names keep conditions and treatments out of what the platforms see.
- Identifiers are hashed with SHA-256 to each platform's requirements.
- Consent management for your site, alongside the tracking.
- A HIPAA-compliant setup done by Curve's team, in about a week, with a BAA signed on every plan.
Book a call with Curve and Curve's team will walk through your tracking setup with you.
Frequently asked questions
Does Slack sign a BAA?
Yes, on an Enterprise-level Slack plan with the Slack HIPAA Enabled SKU. In Slack's words: “On or after March 20, 2023, Customer must purchase the “Slack - HIPAA Enabled” SKU, along with a covered enterprise plan.” We checked Slack's own pages on September 29, 2026.
Which Slack plans include a BAA?
Slack's BAA prerequisites, published by Salesforce, require an Enterprise-level Slack plan, and since March 20, 2023 the “Slack - HIPAA Enabled” SKU along with it. GovGrid plans are not currently eligible.
Does a BAA with Slack cover my ad pixels?
No. A BAA covers the data Slack handles for you. A pixel sends data from the visitor's browser straight to Meta, Google or TikTok, and none of those platforms is a party to your BAA with Slack.
Does Curve Compliance sign a BAA?
Yes. Curve Compliance signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup in about a week. Book a call to get started.
Sources
Last checked . Vendors change their plans and terms, so confirm the current terms with Slack before you send it patient data.
Related tools
- Does Zapier sign a BAA?Does not sign a BAA. Can't sign BAAs; PHI not supported.
- Does Make.com sign a BAA?No public statement. No BAA statement found.
- Does Airtable sign a BAA?Signs a BAA on specific plans. Enterprise Scale plans.
- Does Google Workspace sign a BAA?Signs a BAA. Covered services such as Gmail, Drive and Meet.
- Does Meta sign a BAA?Does not sign a BAA. Business Tools Terms bar health information.
- Does Google Ads sign a BAA?Does not sign a BAA. Google Ads call terms disclaim HIPAA.
Track ad conversions under a BAA
Curve signs a BAA on every plan. Curve's team sets up HIPAA-compliant conversion tracking for you in about a week, sending conversions server-side in place of pixels.
Book a call