HIPAA BAAs are now available to Pro teams

1 min read

Sep 9, 2025

Pro teams can now enter into a Business Associate Agreement (BAA) to support HIPAA-compliant workloads on Vercel. The BAA is available self-serve through the dashboard with no Enterprise contract required.

Vercel supports HIPAA compliance as a business associate by implementing technical and organizational safeguards, conducting annual audits, and offering breach notification in line with HIPAA requirements. Compliance is a shared responsibility between you and Vercel. Teams are responsible for configuring security features, managing access, and validating third-party services.

This update makes it easier for healthcare-focused applications to meet regulatory obligations without upgrading to Enterprise.

Link to headingFrequently asked questions:

How can my organization enter into a BAA with Vercel?

Does having a BAA with Vercel ensure my organization's compliance with HIPAA?

I have a healthcare SaaS solution deployed on Vercel. Do my customers need to sign a BAA with Vercel?

Can Vercel be considered a "conduit" rather than a business associate?

What happens if Vercel experiences a security incident involving my PHI?

Can I use Vercel's services if my data is stored internationally?

Are modifications accepted to the Vercel HIPAA BAA agreement possible?

Read more about other updates to Pro and switch to the new Pro pricing.

A more flexible Pro plan.

Start building with the new Pro plan today. Flexible credits, free viewer seats, and enterprise-grade features now available.

Frameworks

Infrastructure

Security

Use Cases

Users

Tools

Company

HIPAA BAAs are now available to Pro teams

Link to headingFrequently asked questions:

HIPAA BAAs are now available to Pro teams

Authors

Link to headingFrequently asked questions: