Is Affise HIPAA compliant? (2026 update)

Affise MMP is a mobile attribution and mobile measurement platform that helps app teams track installs, user acquisition, subscriptions, campaign performance, and in-app events.

Is Affise MMP HIPAA compliant? No, based on our research, Affise MMP should not be treated as HIPAA compliant unless Affise separately signs a HIPAA business associate agreement.

What changed this year?

As of April 2026, our review did not identify a publicly available Affise MMP HIPAA BAA. Affise does have a health and fitness page that says it helps meet requirements for PHI/ePHI and regulations like HIPAA, but its public terms, user agreement, and DPA do not mention HIPAA or a business associate agreement.

Will Affise MMP sign a business associate agreement?

Affise MMP does not publicly state that it will sign a HIPAA business associate agreement. Its public Data Processing Addendum focuses on GDPR-style personal data processing, with Affise acting as a processor for customer data.

Because HIPAA requires covered entities and business associates to enter into contracts with vendors that access PHI, Affise MMP should not be used with PHI unless Affise provides and signs a HIPAA BAA.

Conclusion

Affise MMP should not be treated as HIPAA compliant unless Affise separately provides and signs a HIPAA BAA. Public claims about security, PHI/ePHI readiness, or GDPR compliance are not enough on their own.

Learn more: HIPAA Compliant Email: The Definitive Guide

FAQs

What is a business associate agreement?

A business associate agreement is a legally binding contract between a HIPAA covered entity and a business associate. It sets rules for how PHI must be protected, used, disclosed, returned, or destroyed.

What is HIPAA?

HIPAA sets national standards for protecting certain health information, known as protected health information or PHI.

Who does HIPAA apply to?

HIPAA applies to covered entities, including healthcare providers, health plans, and healthcare clearinghouses. It also applies to business associates that create, receive, maintain, or transmit PHI for those covered entities.