Skip to main content
BAA Directory

Does Tableau sign a BAA?

The answer

Signs a BAA on specific plans

Yes, for Tableau Cloud and Tableau Next under Salesforce's HIPAA Business Associate Addendum. Tableau Server, Tableau Bridge and Tableau Data Connect are not covered.

Analytics and data. Checked on the vendor's own pages on .

Using Tableau on a healthcare site? Curve Compliance keeps your ad tracking HIPAA-compliant around it, under a BAA on every plan. Book a call

On this page

What Salesforce says

“For Customer’s use of a HIPAA Covered Service to be covered by the BAA: (1) Customer and Salesforce must sign a BAA that includes the HIPAA Covered Service; and (2) Customer must comply with the terms of the BAA and this article, to the extent applicable.”

Source: Salesforce, HIPAA Business Associate Addendum Restrictions (last updated July 31, 2026), checked .

“Tableau Cloud; and Tableau Next (formerly Tableau Einstein)”

Source: Salesforce, HIPAA Business Associate Addendum Restrictions (last updated July 31, 2026), HIPAA Covered Services, checked .

What the BAA covers and excludes

Excludes or limits, in Salesforce's words:

  • "In addition, Tableau Bridge, Tableau Data Connect, and Tableau Server are not covered by the BAA."

What this means for ad tracking

Analytics and reporting tools pull together ad spend, site visits and leads, and on a healthcare site those can connect a person to the care they were looking for.

Tableau dashboards usually pull from ad platforms, Google Analytics and CRMs, so the BAA covers the dashboards in Tableau Cloud, not the connected sources. Audiences or conversions sent from those sources to an ad platform leave the BAA behind.

Curve Compliance closes that gap: Campaign Reporting puts ad spend next to Curve-tracked conversions per platform and campaign, and the conversions themselves reach your ad platforms server-side, under a BAA Curve signs on every plan. Book a call to see it on your own funnel.

How Curve helps

  • Keep Tableau for what it does well. Curve Compliance carries the conversion signal to your ad platforms separately, under its own BAA.
  • Campaign Reporting puts ad spend next to Curve-tracked conversions per platform and campaign, with five attribution models and the conversions behind any number.
  • Server-side conversions to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn, sent from Curve's servers with neutral event names and SHA-256 hashed identifiers.
  • PHI-like pattern detection flags condition names, form answers and emails in URLs before data reaches an ad platform, so they can be stopped at the source.
  • A HIPAA-compliant setup done by Curve's team, in about a week, with a BAA signed on every plan.

Book a call with Curve and Curve's team will walk through your tracking setup with you.

Frequently asked questions

Does Tableau sign a BAA?

Yes, for Tableau Cloud and Tableau Next under Salesforce's HIPAA Business Associate Addendum. Tableau Server, Tableau Bridge and Tableau Data Connect are not covered. In Salesforce's words: “For Customer’s use of a HIPAA Covered Service to be covered by the BAA: (1) Customer and Salesforce must sign a BAA that includes the HIPAA Covered Service; and (2) Customer must comply with the terms of the BAA and this article, to the extent applicable.” We checked Salesforce's own pages on October 1, 2026.

Which Tableau products are covered by a BAA?

Salesforce lists Tableau Cloud and Tableau Next among its HIPAA Covered Services. It says Tableau Bridge, Tableau Data Connect and Tableau Server are not covered by the BAA.

Does a BAA with Tableau cover my ad pixels?

No. A BAA covers the data Salesforce handles for you. A pixel sends data from the visitor's browser straight to Meta, Google or TikTok, and none of those platforms is a party to your BAA with Salesforce.

Does Curve Compliance sign a BAA?

Yes. Curve Compliance signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup in about a week. Book a call to get started.

Sources

Last checked . Vendors change their plans and terms, so confirm the current terms with Salesforce before you send it patient data.

See every tool in the BAA Directory.

Track ad conversions under a BAA

Curve signs a BAA on every plan. Curve's team sets up HIPAA-compliant conversion tracking for you in about a week, sending conversions server-side in place of pixels.

Book a call