Compliance status
HIPAA Compliance
BAA offered: True
StatusConditional
SOC 2 Compliance
Based on public disclosures & vendor documentation.
StatusYes
Compliance Summary & Evidence
Outlook.live.com offers features and configurations that can support HIPAA compliance with appropriate enterprise agreements (Microsoft 365 E3/E5) and a signed BAA, and maintains SOC 2 certification demonstrating its commitment to security, availability, processing integrity, confidentiality, and privacy.