Skip to main content
BAA Directory

Does your marketing stack sign a BAA?

The answer

Pick the marketing and operations tools you use and this checker shows which sign a business associate agreement, on which plans, from each vendor's own page. Ad platforms such as Meta and Google Ads don't sign one, so the checker also shows how Curve Compliance carries your ad conversions under its own BAA.

181 tools. Checked on each vendor's own page between and .

Rather have Curve's team go through your stack with you? Book a call

Check your stack

Search or browse by category and tick the tools you use; your results appear below. The checker runs in your browser against the directory data already on this page, and it makes no request with your picks.

0 picked

Scheduling and intake
CRM and email
Call tracking and phones
Analytics and data
Forms and landing pages
Support and chat
Messaging and payments
Site builders
Automation and workspace
Video, reviews and SMS
Ad platforms
AI assistants
HIPAA ad tracking

Your results

Pick at least one tool above to see which of your tools sign a BAA.

Book a call to review your stack
On this page

What your results mean

  • Signs a BAA. The vendor's own page says it signs a BAA with healthcare customers.
  • Signs a BAA on specific plans. The vendor signs a BAA only on the plans, editions or products it names, and those are listed with the answer.
  • Does not sign a BAA. The vendor's own page says it does not sign a BAA, or that its service is not for health information.
  • No public statement. We could not find a statement about a BAA on the vendor's own pages that we could quote.

Select any tool in your results for the vendor's own words, the source link and what the answer means for your ad tracking. Every tool is also in the BAA Directory.

Your ad platforms

These are the ad platforms in the directory, with each one's answer from its own terms:

Your ad platforms still need conversions to optimize on. Curve Compliance sends them to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn server-side, with a fixed list of fields and neutral event names, under the BAA it signs on every plan.

How Curve helps

  • Curve's team will map which of your tools touch patient data and review what your website sends to Meta, Google and TikTok with you.
  • Curve replaces browser ad pixels with one script and sends conversions server-side to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn from Curve's servers.
  • Curve detects PHI-like patterns, such as condition names, form answers and emails in URLs, before data reaches an ad platform, and flags them so they can be stopped at the source.
  • Each platform receives only a fixed list of fields. Contact identifiers are off by default on Meta, Google Ads and TikTok, and events can use neutral names.
  • Event Logs show what Curve sent to each platform and what the platform accepted.
  • Curve signs a BAA on every plan, and Curve's team does the setup for you, typically live in about a week.

Book a call with Curve and Curve's team will walk through your tracking setup with you.

Frequently asked questions

Which of my tools need a BAA?

A HIPAA covered entity needs a business associate agreement with any vendor that handles its patients' Protected Health Information, such as a scheduling tool that holds bookings or a form builder that holds intake answers. Tick your tools above to see which vendors sign one, and on which plans.

What if a tool says “HIPAA compliant” but no BAA?

Until the vendor puts a BAA in writing for you, treat it as a tool that has not agreed to protect patient data. In this directory, 23 tools make no public statement about a BAA. Ask the vendor for a BAA before you send it patient information.

Does a BAA with my booking tool cover my pixels?

No. A BAA covers the data one vendor handles for you. A pixel sends data from the visitor's browser to Meta, Google or TikTok, and none of them is a party to that BAA.

How current is this data?

Every result shows the date we last checked the vendor's own page. The checks behind this tool run from September 29, 2026 to October 26, 2026. Vendors change their plans and terms, so confirm the current terms with the vendor before you send it patient data.

Can Curve Compliance review my whole stack?

Yes. Curve's team will map which of your tools touch patient data, review what your website sends to Meta, Google and TikTok with you, and set up ad tracking that runs under a BAA, typically live in about a week. Book a call to get started.

Track ad conversions under a BAA

Curve signs a BAA on every plan. Curve's team sets up HIPAA-compliant conversion tracking for you in about a week, sending conversions server-side in place of pixels.

Book a call