Vendor compliance profile

Wix HIPAA compliance, forms, and BAA notes

Wix may support HIPAA-regulated site workflows only after PHI protection is activated, a supported plan is used, and the BAA process is completed. Standard Wix use, unsupported apps, and third-party integrations should not be treated as PHI-ready.

Visit vendor site

HIPAA status signal

Conditional

BAA public signal

Available after PHI protection

SOC 2 evidence signal

Verify with vendor

PHI warning: Website forms, bookings, chat widgets, analytics, and third-party apps may capture regulated data.

HIPAA, BAA, and SOC 2 summary

HIPAAWix documents a PHI protection workflow for supported plans and states that configuration, apps, and customer use remain customer responsibilities.
BAAWix states that after activating PHI protection, customers can sign a BAA in the HIPAA Compliance area of the site dashboard.
SOC 2SOC 2 evidence was not the primary public signal reviewed for Wix in this pass. Ask Wix for current security attestations if required by procurement.
CategoryHIPAA-Compliant Forms and Intake Software

What it may be used for

  • General business workflows that do not include PHI.
  • Healthcare-adjacent operations after BAA scope and configuration have been verified.
  • Vendor risk review, procurement research, and compliance planning.

What not to use it for

  • Storing diagnosis, treatment, patient notes, or identifiers without verified BAA coverage.
  • Sending PHI through unsupported forms, messages, automations, or integrations.
  • Replacing legal, compliance, security, or vendor contract review.

What to verify with the vendor

  • Whether the vendor will sign a BAA for your exact product, plan, and use case.
  • Which services, add-ons, regions, and support channels are covered by the agreement.
  • Whether your intended workflow stores, transmits, or processes PHI.
  • Which admin, access control, retention, audit log, and encryption settings must be enabled.

Safer alternatives and related profiles

Jotform

HIPAA: Conditional | SOC 2: Public evidence

Airtable

HIPAA: Conditional | SOC 2: Public evidence

Google Workspace

HIPAA: Conditional | SOC 2: Public evidence

Zapier

HIPAA: Not supported for PHI | SOC 2: Public evidence

HubSpot

HIPAA: Conditional | SOC 2: Public evidence

FAQ

Is Wix HIPAA compliant?

Wix may support HIPAA-regulated site workflows only after PHI protection is activated, a supported plan is used, and the BAA process is completed. Standard Wix use, unsupported apps, and third-party integrations should not be treated as PHI-ready.

Will Wix sign a BAA?

Wix states that after activating PHI protection, customers can sign a BAA in the HIPAA Compliance area of the site dashboard.

Can Wix be used with PHI?

Do not use this vendor with PHI until your organization verifies BAA scope, covered services, configuration, access controls, data retention, and connected integrations.

Last checked and source notes

Last checked
2026-04-30
Confidence
Medium
Dataset rows
267 vendors