Is Weave HIPAA compliant?
Phone system, texting and reminders for dental and medical practices. Weave's Business Associate Agreement addendum supplements its Terms of Service and takes effect with the service agreement.
Weave signs a Business Associate Agreement. Weave publishes a Business Associate Agreement addendum that supplements the underlying agreement, including the Terms of Service, and is effective upon execution of that agreement; subcontractors are bound to the same restrictions.
A BAA alone does not make its use HIPAA compliant: you remain responsible for configuring it securely and covering it in your risk analysis.
Source: Weave — Business Associate Agreement · checked
Choosing a tool is one part of HIPAA. See everything you need to have in place → · Managing several vendors? Free Vendor & BAA Register →
BAA details
| Signs a BAA | Yes | Weave — Business Associate Agreement |
|---|
Limitations
- The BAA does not settle what you send by text or patients' consent to texts and calls — set those rules yourself. source
- The published BAA also permits Weave to use PHI for internal analytics and its own product development, subject to HIPAA, and to use properly de-identified data for any purpose, including AI models. Separately, section 3.3 permits use of PHI within internal and external AI systems and models, only to the extent permitted by HIPAA — do not assume AI processing is limited to de-identified data. Review these provisions and the related settings before enabling recordings, transcripts or AI features. source
Against our criteria
| BAA without a sales process | Yes — The addendum takes effect with the service agreement; no separate request is described. | Weave — Business Associate Agreement |
|---|---|---|
| BAA on entry-level team plans | Not verified | Not verified yet |
Alternatives
- 8x8 X Series →BAA: conditional
- Dialpad →BAA: yes
- Google Voice →BAA: conditional
- Nextiva →BAA: yes
- Quo →BAA: conditional
- RingCentral RingEX →BAA: yes