Rackspace is a leading cloud services provider that offers tools for cloud hosting, managed services, and IT infrastructure management.

With Rackspace, organizations can deploy and manage cloud environments, optimize their IT infrastructure, and receive expert support. This helps businesses enhance scalability, improve performance, and ensure reliable and secure operations.

Is Rackspace HIPAA compliant? Yes, based on our research, Rackspace can be HIPAA compliant.

 

What changed this year?

As of April 2026, our review did not identify any publicly disclosed changes to Rackspace's HIPAA-related policies or BAA terms.

 

Will Rackspace sign a business associate agreement (BAA)?

Yes, Rackspace will sign a business associate agreement, which can be reviewed here. Rackspace offers a BAA with all dedicated hosting services, which is an essential element for healthcare organizations pursuing HIPAA compliance. Notably, for AWS accounts that Rackspace supports, customers only need to sign a BAA with Rackspace; a separate BAA with AWS is not required.

 

What does the Rackspace BAA cover?

The Rackspace BAA covers the use and disclosure of protected health information (PHI). Their compliance page states, "Businesses that create, access, store, or exchange protected health information (PHI) must adhere to strict data standards and regulations. Our HITRUST CSF certification helps ensure that your dedicated hosting environment exceeds the healthcare industry's complex data privacy and security regulations."

Their HIPAA-eligible services include:

  • Dedicated hosting environments with HITRUST CSF certification
  • Managed AWS, Microsoft Azure, and Google Cloud environments
  • Multi-cloud infrastructure management with security monitoring
  • Data encryption for all traffic between customers and Rackspace infrastructure

 

What does the Rackspace BAA exclude?

Rackspace is HIPAA compliant for HIPAA-eligible services only, provided that those services are configured to support HIPAA compliance, that all traffic between a customer and Rackspace is encrypted, and that the customer agrees to Rackspace's HIPAA Addendum to the Terms of Service. It is the responsibility of all users to ensure that hosting services are set up properly, as Rackspace cannot ascertain whether its customers are using its services in a manner that adheres to HIPAA rules.

 

Conclusion

Rackspace signs a BAA and is therefore HIPAA compliant.

Learn more: HIPAA Compliant Email: The Definitive Guide

 

FAQs

What is a business associate agreement?

A business associate agreement (BAA) is a legally binding contract establishing a relationship between a covered entity under the Health Insurance Portability and Accountability Act (HIPAA) and its business associates. The purpose of this agreement is to ensure the proper protection of personal health information (PHI) as required by HIPAA regulations.

 

What is HIPAA?

The Health Insurance Portability and Accountability Act (HIPAA) sets national standards for protecting the privacy and security of certain health information, known as protected health information (PHI).

HIPAA is designed to protect the privacy and security of individuals' health information and to ensure that healthcare providers and insurers can securely exchange electronic health information. Violations of HIPAA can result in significant fines and penalties for covered entities.

 

Who does HIPAA apply to?

HIPAA applies to covered entities, which include healthcare providers, health plans, and healthcare clearinghouses. It also applies to business associates of these covered entities. These are entities that perform certain functions or activities on behalf of the covered entity.