3 ms·

Hey, can you elaborate a touch on the lack of HIPAA compliance with Slack? Some folks on my team seem to think it's compliant - and I'm not finding true hard a

Hey, can you elaborate a touch on the lack of HIPAA compliance with Slack? Some folks on my team seem to think it's compliant - and I'm not finding true hard answers either way (ignoring the BAA side of things)

ceruleanscott 8y ago
Slack showcases the HIPAA logo on their security page, but upon closer inspection - https://slack.com/terms-of-service/supplement#healthcare https://slack.com/terms-of-service/supplement#healthcare - you'll see that unless you've signed a separate agreement with them, you acknowledge that Slack is not HIPAA compliant and that you are not to send them any PHI. My guess: they are signing BAAs for grid customers only (so the logo isn't a lie) and making them pay handsomely for the pleasure. As I shamelessly disclosed upthread, we (Trillian) offer a HITRUST certified, BAA-backed solution for healthcare organizations that comes in SaaS and on-prem variants. More: https://trillian.im/uses/hipaa-compliant-texting/ https://trillian.im/uses/hipaa-compliant-texting/
deleted 8y ago
[deleted]