.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
Klaviyo is a marketing automation platform that helps organizations create and deliver personalized messaging via email and SMS. It targets eCommerce companies and online retailers, helping them track customer interaction.
Is Klaviyo HIPAA compliant? No, based on our research, Klaviyo is not HIPAA compliant.
What changed this year?
In 2026, Klaviyo updated its Acceptable Use Policy on April 9, its privacy FAQs on June 16, and its Data Processing Agreement (DPA) on September 11. These updates did not change its published restriction on health information: the policy still prohibits medical records and health information, including PHI, from the platform. Klaviyo’s 2021 policy contained the same restriction.
As of September 2026, we found no publicly disclosed business associate agreement (BAA) offering or change that permits HIPAA regulated use of the platform. The current DPA also says that special categories of personal data are not applicable because the Acceptable Use Policy prohibits customers from processing them through Klaviyo.
Will Klaviyo sign a BAA?
No, Klaviyo does not sign a BAA, and therefore is not HIPAA compliant.
Klaviyo is designed for customer service and marketing, not for covered entities, like healthcare organizations, to create, receive, maintain, or transmit protected health information (PHI).
Conclusion
Klaviyo does not sign a BAA and is therefore not HIPAA compliant.
See also: HIPAA Compliant Email: The Definitive Guide (2026 Update)
FAQs
What is a BAA?
A BAA is a legally binding contract that establishes a relationship between a covered entity under HIPAA and its business associates. This agreement ensures the proper protection of PHI, as required by HIPAA regulations.
What is HIPAA?
HIPAA sets national standards for protecting the privacy and security of certain health information, known as PHI. HIPAA ensures that healthcare providers and insurers securely exchange electronic health information.
Who does HIPAA apply to?
HIPAA applies to covered entities, including healthcare providers, health plans, and healthcare clearinghouses. It also applies to business associates of these covered entities, who perform certain functions or activities on their behalf.
