HIPAA BAAs are now available to Pro teams

Pro teams can now enter into a Business Associate Agreement (BAA) to support HIPAA-compliant workloads on Vercel. The BAA is available self-serve through the dashboard with no Enterprise contract required.

Vercel supports HIPAA compliance as a business associate by implementing technical and organizational safeguards, conducting annual audits, and offering breach notification in line with HIPAA requirements. Compliance is a shared responsibility between you and Vercel. Teams are responsible for configuring security features, managing access, and validating third-party services.

This update makes it easier for healthcare-focused applications to meet regulatory obligations without upgrading to Enterprise.

Link to headingFrequently asked questions:

How can my organization enter into a BAA with Vercel?

Does having a BAA with Vercel ensure my organization's compliance with HIPAA?

I have a healthcare SaaS solution deployed on Vercel. Do my customers need to sign a BAA with Vercel?

Can Vercel be considered a "conduit" rather than a business associate?

What happens if Vercel experiences a security incident involving my PHI?

Can I use Vercel's services if my data is stored internationally?

Are modifications accepted to the Vercel HIPAA BAA agreement possible?

Read more about other updates to Pro and switch to the new Pro pricing.

A more flexible Pro plan.

Start building with the new Pro plan today. Flexible credits, free viewer seats, and enterprise-grade features now available.

Agent Stack

Core Platform

Tools

Learn

Build

Explore

HIPAA BAAs are now available to Pro teams

Link to headingFrequently asked questions:

Ready to deploy?