HIPAA Compliance on the Proof Platform – Proof Help Center
Proof enables HIPAA compliance for covered entities that sign a business associate agreement (BAA) with Proof and request HIPAA compliance activation through their Customer Success Manager or Sales team, while maintaining security through annual SOC 2 audits and Kantara Certification despite lacking HITRUST Certification.
The short answer: Proof can enable HIPAA compliance for covered entities that sign a business associate agreement (BAA).
HIPAA compliance must be enabled by Proof. Contact your Customer Success Manager (CSM) or have an owner or admin from your company contact our Sales team using an email address connected to your company's Proof account.
HIPAA compliance
The Health Insurance Portability and Accountability Act (HIPAA) establishes standards for the protection of sensitive patient information in electronic healthcare transactions.
Proof supports HIPAA compliance for any organization that meets both requirements below:
- Meets the definition of a covered entity
- Signs a business associate agreement (BAA) provided by Proof that delineates each party's roles and responsibilities
Additional protections
Some organizations supporting HIPAA compliance also have a HITRUST Certification that covers controls for the processing of highly sensitive data, such as personal health information (PHI). Though Proof does not have a HITRUST Certification, we are committed to security and:
- Undergo a System and Organization Control (SOC 2) audit each year
- Maintain a Kantara Certification
Both of these follow the same security principles and controls related to the processing of sensitive information.
Summary Checklist
- Your organization meets the definition of a covered entity.
- Your organization has signed a business associate agreement (BAA) with Proof.
- HIPAA compliance has been enabled by Proof — contact your CSM or Sales team to request this.
Still unsure? Contact Proof Support for help.
Related
Proof Security Statement
Proof's Security Statement, last updated January 22, 2024, details that Proof implements and maintains comprehensive technical, physical, and organizational security measures compliant with multiple rigorous frameworks—including AICPA Trust Services Criteria (SOC2), NIST SP 800-53 Rev 5 at moderate level, WebTrust, Massachusetts CMR 17.00, and PCI DSS via third-party processors—and meets additional legal requirements such as HIPAA and FERPA, all validated through annual audits and assessments to protect user data from unauthorized access, disclosure, alteration, loss, or destruction.
Notarize: Remote Online Notarization by Proof
Notarize by Proof offers a secure, 24/7 remote online notarization platform accepted in all 50 states, enabling individuals and businesses to notarize documents instantly without appointments, featuring compliant identity verification, optional witnesses, custom branding, and the ability to use either your own or Proof’s extensive notary network to ensure seamless, fraud-protected notarizations anytime.
Certify: Cryptographic Evidence
Certify provides cryptographically signed, biometric-linked digital evidence that makes documents, data, and media instantly verifiable and tamper-proof, ensuring authenticity and preventing AI-generated forgeries across various applications including payments, wire transfers, and crypto compliance.
Legal Terms Update (30 September 2025)
The Legal Terms Update effective 30 September 2025 defines three priority levels for incident impact and resolution criteria, specifies conditions for help-desk ticket closure based on incident severity and response timelines, and outlines a tiered credit system for On-Demand Notary and Platform Availability downtime measured monthly.
Sign: Secure eSignatures
Proof's Sign is an eSignature platform that integrates identity verification directly into the signing process, offering customizable verification levels, automated compliance with over 4.5 million rules, native unification of identity and signing to reduce vendor complexity, control over signing order, stakeholder visibility without edit access, seamless API integration with existing systems, and upcoming cryptographically verified digital signatures for tamper-proof evidence.
Proof Business Pro
Proof Business Pro is a comprehensive, pay-per-transaction platform offering online notarization starting at $25 per meeting, identity verification from $4 per person, and eSignature services at $4 per transaction, designed to streamline business operations with automated transaction management, robust security, and flexible workflows that enhance efficiency, reduce errors, and provide seamless, secure customer interactions anytime, anywhere.