HIPAA (for SaaS)

Compliance with the Health Insurance Portability and Accountability Act for SaaS tools that process protected health information (PHI). HIPAA-compliant SaaS requires a Business Associate Agreement (BAA) and specific security controls.