Slack showcases the HIPAA logo on their security page, but upon closer inspection - https://slack.com/terms-of-service/supplement#healthcare https://slack.com/t

Slack showcases the HIPAA logo on their security page, but upon closer inspection - https://slack.com/terms-of-service/supplement#healthcare https://slack.com/terms-of-service/supplement#healthcare - you'll see that unless you've signed a separate agreement with them, you acknowledge that Slack is not HIPAA compliant and that you are not to send them any PHI. My guess: they are signing BAAs for grid customers only (so the logo isn't a lie) and making them pay handsomely for the pleasure. As I shamelessly disclosed upthread, we (Trillian) offer a HITRUST certified, BAA-backed solution for healthcare organizations that comes in SaaS and on-prem variants. More: https://trillian.im/uses/hipaa-compliant-texting/ https://trillian.im/uses/hipaa-compliant-texting/