SmartSuite has undergone a formal third-party HIPAA compliance audit, conducted by Prescient Assurance; the report, listed as SmartSuite Holdings Inc - HIPAA Report - 2025, is in the Trust Center. SmartSuite can enter into a Business Associate Agreement (BAA) for customers on Enterprise and Signature plans.
Plan Availability | All plan types for the security measures. A BAA: customers on Enterprise and Signature plans (pricing page). |
Permissions | Administrators request the report and the BAA. |
Platform | Web |
Related Reading |
What does the HIPAA audit mean?
HIPAA, or the Health Insurance Portability and Accountability Act of 1996, is a U.S. federal law whose Privacy and Security Rules are issued by the U.S. Department of Health and Human Services (HHS). SmartSuite has undergone a formal third-party HIPAA compliance audit, conducted by Prescient Assurance. Businesses subject to HIPAA can confidently use SmartSuite to support HIPAA-compliant work management.
How do I get the HIPAA report?
Open the Trust Center at trust.smartsuite.com.
Request access to the document listed as SmartSuite Holdings Inc - HIPAA Report - 2025.
Optional: ask your account manager or the sales team for the report instead.
How do I get a BAA?
SmartSuite supports HIPAA compliance and can enter into a Business Associate Agreement (BAA) for customers on Enterprise and Signature plans. If you are interested in signing a BAA with SmartSuite, contact your account manager or the sales team (the security page gives the contact route). Annex 1 of the Data Processing Addendum states that special categories of data are not intended unless expressly agreed in writing, for example through an addendum such as a BAA.
Frequently asked questions
Is SmartSuite HIPAA compliant?
SmartSuite has undergone a formal third-party HIPAA compliance audit, conducted by Prescient Assurance, and businesses subject to HIPAA can confidently use SmartSuite to support HIPAA-compliant work management. A BAA is available to customers on Enterprise and Signature plans.
Which plans can sign a BAA?
Enterprise and Signature, as the pricing page states.
Where is protected health information hosted?
SmartSuite is hosted by Amazon AWS, whose compliance programs include PCI DSS, HIPAA/HITECH, FedRAMP, FIPS 140-2, NIST 800-171 and GDPR. Enterprise and Signature customers choose where their data is hosted: a United States or a European Union data center. All communications with SmartSuite are HTTPS encrypted, and data at rest is encrypted with the AES-256 algorithm.
Last verified 22 Oct 2026 against www.smartsuite.com/security (HIPAA audit, auditor, BAA route, hosting, encryption; read 22 Oct 2026), trust.smartsuite.com (report name) and the pricing page (BAA on Enterprise and Signature). Annex 1 is from the customer DPA page