Microsoft Teams (Microsoft 365): HIPAA status
Microsoft's meetings and chat. Microsoft Teams is an in-scope service under the Microsoft HIPAA BAA included in Microsoft 365 business terms.
Signs a BAAYes
Microsoft Teams (Microsoft 365) signs a Business Associate Agreement. Microsoft Teams is listed among in-scope Office 365 services; the BAA is included by default for covered entities and business associates.
Source: Microsoft — HIPAA & HITECH offering (Office 365 in-scope services) · checked
Microsoft Teams (Microsoft 365) and HIPAA at a glance
Microsoft Teams (Microsoft 365) signs a Business Associate Agreement. A BAA alone does not make its use HIPAA compliant: you still need to turn on security defaults or Conditional Access so users sign in with MFA (recommended). Facts checked against Microsoft's own documentation on 2026-10-06.
| Signs a BAA | Yes |
|---|---|
| How you get it | Microsoft Teams is listed among in-scope Office 365 services; the BAA is included by default for covered entities and business associates. |
| You still need to | Turn on security defaults or Conditional Access so users sign in with MFA (recommended). |
| Main limitation | Covered under Microsoft's standard BAA only; Microsoft does not sign customers' own BAA forms. |
| Last checked | 2026-10-06 |
BAA details
What you still have to configure
- Turn on security defaults or Conditional Access so users sign in with MFA (recommended). source
Limitations
- Covered under Microsoft's standard BAA only; Microsoft does not sign customers' own BAA forms. source
Against our criteria
| BAA without a sales process | Yes — Included in standard licensing terms. | Microsoft — HIPAA & HITECH offering (Office 365 in-scope services) |
|---|---|---|
| BAA on a free plan | No — Requires a Microsoft 365 business subscription. | Microsoft — HIPAA & HITECH offering (Office 365 in-scope services) |