Compliance status
HIPAA Compliance
BAA offered: True
StatusConditional
SOC 2 Compliance
Based on public disclosures & vendor documentation.
StatusYes
Compliance Summary & Evidence
Shopify offers a robust security framework and SOC 2 compliance, but HIPAA compliance is conditional, requiring specific plans and configurations alongside a signed Business Associate Agreement for handling protected health information.