Lately, we've been discussing in the office whether certain cloud-based solutions are HIPAA compliant or not.
Optimizely is a leading customer experience optimization platform. We know the HIPAA industry is vast so we can empathize with just how many people need to use cloud-based services in this sector.
In previous posts, we’ve covered the following cloud solutions and their capabilities for HIPAA compliance:
Today, we will determine if Optimizely offers HIPAA compliance or not.
SEE ALSO: HIPAA Breaches and Cloud Providers
According to their site, Optimizely is the world’s leading experimentation platform, enabling businesses to deliver continuous experimentation and personalization across websites, mobile apps and connected devices.
We’ve previously talked about how a Business Associate Agreement (BAA) is a written contract between a Covered Entity and a Business Associate. It is required by law for HIPAA compliance. We checked Optimizely's site and found the answer we're looking for in their Terms of Service Agreement. In it, they clearly state:
HIPAA non-compliance. Customer acknowledges that Optimizely is not a Business Associate or subcontractor (as those terms are defined in HIPAA) and that the Optimizely Service is not HIPAA compliant. “HIPAA” means the Health Insurance Portability and Accountability Act and related amendments and regulations as updated or replaced. “Regulated Data” includes HIPAA-regulated data and data covered under the Gramm-Leach-Bliley Act (or related rules or regulations) as updated or replaced.
Optimizely is not HIPAA compliant.