Google will sign a HIPAA Business Associate Agreement (BAA) for Google Workspace clients.

It covers Gmail, Google Drive, Google Calendar, and Google Vault. If you set the file sharing up properly in Google Drive, it's a brilliant choice for HIPAA compliant cloud storage. Learn more about our HIPAA Compliant Google Workspace services here. Microsoft will also sign a BAA for mail, file storage, calendars, and other aspects of Microsoft Online. While they are a bit harder to use than Google Workspace, Microsoft offers some terrific data loss prevention tools that can help to keep you safer. Microsoft's file sharing service (OneDrive) also got a great rating, 5 stars from PCMagazine in 2020. Do you want HIPAA compliant cloud storage to share data with other companies? Learn more about our HIPAA Compliant Microsoft 365 services here. Google Workspace and Microsoft 365 (reviewed above) can definitely share data securely with other companies. You need to be careful, though, about how you set up the file sharing for compliance to make sure you don't accidentally expose your PHI to the internet. However, you might not need the other features that come with these services. If you already use another service for email, calendaring, and file editing, then you might want to go with a dedicated file sharing service. People often ask 'Is Dropbox HIPAA compliant?' You bet it is! The most popular and arguably the most well-developed of the cloud storage providers, Dropbox is usually the first provider people think when they think “cloud storage.” Fortunately, Dropbox is HIPAA compliant now with their Dropbox Business service. This includes signing a BAA with you to meet all the requirements. Box.comīox meets all of the security and encryption requirements set forth by HIPAA and is willing to sign a Business Associate Agreement. You can find more detailed information on their compliance on their website. Do you want to back up your data safely to the cloud?Īll of the previous services mentioned can be used for safe, HIPAA compliant cloud storage. However, they require some configuration and oversight. One of the best protections against ransomware attacks is to have a good, up-to-date backup.

It's also one of the best ways to protect your business from interruption if your computers are lost, stolen, or damaged. SpiderOak offers a great 'set it and forget it' cloud backup service. You install their program on your computer, and all of your files are safely and automatically backed up to the cloud. One of the reasons we love them is due to their 'zero knowledge' policy. They encrypt every single possible aspect of their service, which means there is no way their staff could access your data without your involvement. CarboniteĬarbonite is another popular backup service. Want to save a TON of money and don't mind some technical work? Amazon S3 Glacier is dirt cheap, but requires you to be IT savvy to use it for regular backups. It also covered by the HIPAA BAA that Amazon will sign. AcronisĪcronis used to be on our 'not HIPAA compliant' list, but as of June 2020, they will sign a Business Associate Agreement! 9. CrashPlanĬrashPlan features a default active AES-256 encryption and will sign a BAA. BackblazeĪnother former 'not HIPAA compliant' listing was for Backblaze. As of October 2020, they will sign a BAA for their clients. We are huge fans on Amazon Web Services (AWS). Their security is top notch and they're happy to sign a HIPAA Business Associate Agreement. Check out our article: Secure Cloud Computing: 7 Ways I’d Hack You On AWS'. We also reviewed a number of other popular cloud storage and backup providers to see if they could be considered HIPAA compliant cloud storage.Īlso, popular company SugarSync makes no mention of being willing to sign a HIPAA Business Associate agreement on their site. If you get a result like this, then move on to another provider! Just type: 'business associate agreement site:' into a Google search, like this: You can quickly and easily tell how seriously a cloud storage company takes HIPAA compliance with a simple google search.

Spideroak vs crashplan