Microsoft 365 — HIPAA Compliance Summary

This page summarizes the published HIPAA compliance posture for Microsoft 365 (Productivity Suite) based on the vendor’s own documentation.

• HIPAA compliant: Yes
• Signs a BAA: Yes
• BAA required tier: All commercial plans (via Microsoft Online Services DPA)
• Official docs: https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech

Values of “Not Stated” indicate the vendor did not explicitly state the fact on its official domain.

Source: https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech