Hi all, First timer over here and am developing a custom CRM in the senior industry. I was wondering, can I still develop on the bubble platform and be protected under HIPPA compliancy laws? Thanks! Ryan

Thank you for the quick response. I spoke to a company by the name of truevault that is a HIPPA compliant cloud and hosting company, and their question for me to ask was can you store a subset of your data in a different data base. @emmanuel Ryan

You can have a separate SQL Database and use the DB Connector, but i don’t think that’d make you compliant.

Do you know any customers of yours that have created a web app that is HIPPA compliant using an external database? I would like to be able to use your product to develop my idea, but need a little help with the questions that would be flying back and forth. Is there any information that I would need to present to a HIPPA compliant hosting company so that they would understand how to talk to the Bubble system? @emmanuel Thank You, Ryan

Hi Ryan, do you have a thorough understanding of the requirements to be HIPPA compliant? My understanding is there are many requirements and being on a separate database wouldn’t be near enough to be compliant. If you’re well versed in HIPPA compliance, then perhaps you can find a creative solution. If not, I strongly advise you to use only HIPPA compliant vendors and not to try to get creative. Note - very few products are HIPPA compliant. Even Google won’t make the vast majority of their products HIPPA compliant because it’s so very costly to support. So, you’ll want to be very careful about the vendors you choose.

Also, I think you’ll probably be required to have all of your software vendors sign a BAA which means that they agree to be complaint and have liability if they don’t follow the rules. In my experience, only vendor’s who are focused on the healthcare space and make a point of being HIPPA compliant will take on that type of risk.

Ok. Still learning my options for HIPPA compliancy as I go through the process. Thank you for your input and time. Regards, Ryan

You’re welcome. Best of luck!

I consult with small businesses on HIPAA compliance, and I’m happy to talk through your application with you. There is a chance you could keep Bubble outside the compliance scope (though I may not recommend it depending on the application). Truevault may be one option, but it is not without risks of it’s own. At any rate, I would need more context to point you in a solid direction.

According to this Amazon whitepaper, AWS is HIPPA compliant. All that’s needed is for Bubble to request a BAA (Business Agreement) from Amazon. AWS_HIPAA_Compliance_Whitepaper.pdf 633.55 KB [image] HIPAA Compliance - Amazon Web Services (AWS) Entities subject to HIPAA compliance can use AWS to process, maintain, and store protected health information. Learn how AWS can help your business. Architecting%20for%20HIPAA%20one-pager%202018.pdf 211.09 KB

HIPPA Compliancy

Questions

emmanuel October 7, 2016, 9:26pm 2

Hello,

No, we don’t support this currently. it’s a very big project to be HIPPA compliant.

Topic		Replies	Views
Any Update on HIPAA Compliance? Questions	43	7041	July 25, 2024
Challange for amazeball developers (Virgil Security, HIPAA) Questions	73	6199	November 25, 2021
🏥 Balancing Compliance & No-Code: Our New HIPAA-Ready Stack Showcase	13	511	January 22, 2026
HIPAA compiance with Bubble Questions	5	3182	October 13, 2020
Any dental/medical/health related apps? Questions	8	2794	August 27, 2019

HIPPA Compliancy

Related topics