SmartSuite has undergone a formal third-party HIPAA compliance audit, conducted by Prescient Assurance, and can enter into a Business Associate Agreement (BAA) for customers on Enterprise and Signature plans. SmartSuite supports education customers' FERPA obligations; there is no official FERPA certification issued by the government.
The HIPAA report is in the Trust Center. A BAA is arranged through your account manager or the sales team.
Example: a hospital's compliance office plans to track privacy incidents in SmartSuite. Before any patient detail goes in, it moves to Enterprise and signs a BAA through its account manager.
Plan Availability | All plan types for the security measures. A BAA: customers on Enterprise and Signature plans. |
Permissions | Administrators request a BAA. Every member's data is covered by the same security measures. |
Platform | Web |
Related Reading |
What is HIPAA?
HIPAA, or the Health Insurance Portability and Accountability Act of 1996, is a U.S. federal law whose Privacy and Security Rules are issued by the U.S. Department of Health and Human Services (HHS). It serves as a national standard to protect the security and privacy of protected health information (PHI).
Has SmartSuite been audited for HIPAA?
SmartSuite has undergone a formal third-party HIPAA compliance audit, conducted by Prescient Assurance. Businesses subject to HIPAA can confidently use SmartSuite to support HIPAA-compliant work management.
The report, listed as SmartSuite Holdings Inc - HIPAA Report - 2025, is in the Trust Center. See HIPAA at SmartSuite: audit report and BAA.
Does SmartSuite sign a BAA?
SmartSuite supports HIPAA compliance and can enter into a Business Associate Agreement (BAA) for customers on Enterprise and Signature plans.
If you are interested in signing a BAA with SmartSuite, contact your account manager or the sales team. The security page gives the contact route.
Note: If you plan to store protected health information in your workspace, ask for a BAA first. A BAA is available to customers on Enterprise and Signature plans.
What is FERPA?
The Family Educational Rights and Privacy Act is a US federal law that protects the privacy of student education records at institutions that receive federal funding. Students, or parents of students under 18, can view their records, request corrections, and must consent before the school shares the records except in specific legal cases.
Is there a FERPA certification?
No. The government issues no FERPA certification. Compliance means managing student records according to the law's rules.
How does SmartSuite support FERPA?
SmartSuite maintains the security and privacy of education records under its security program. SmartSuite holds a SOC 2 Type II attestation report, issued by an independent CPA firm under the AICPA's SOC 2 framework, and ISO/IEC 27001:2022 certification.
See SmartSuite Security Practices for the current attestations.
Frequently asked questions
Is SmartSuite HIPAA compliant?
Is SmartSuite HIPAA compliant?
SmartSuite has undergone a formal third-party HIPAA compliance audit, conducted by Prescient Assurance. It can enter into a BAA for customers on Enterprise and Signature plans.
Which plans can sign a BAA?
Which plans can sign a BAA?
A BAA is available to customers on the Enterprise and Signature plans. Contact your account manager or the sales team.
Is SmartSuite FERPA certified?
Is SmartSuite FERPA certified?
There is no official FERPA certification issued by the government. SmartSuite supports education customers' FERPA obligations under its security program.
Where do I ask about HIPAA or FERPA?
Where do I ask about HIPAA or FERPA?
For a BAA, contact your account manager or the sales team. For FERPA questions, contact the sales team. The Global Privacy Policy describes SmartSuite's privacy practices.
Last verified 1 Nov 2026.