Zapier vs Make.com: which signs a HIPAA BAA?
Neither has a BAA you can rely on. Zapier doesn't offer a BAA. We couldn't confirm a BAA for Make.com from Make (Celonis)'s own pages.
- Business associate
- Zapier
- Tool
- Zapier (incl. Zapier AI / Agents)
- Plans with a BAA
- None
- Checked
No BAA
- Business associate
- Make (Celonis)
- Tool
- Make.com
- Plans with a BAA
- Not stated
- Checked
Not confirmed
Side by side
| ZapierZapier | Make.comMake (Celonis) | |
|---|---|---|
| BAA | No BAA | Not confirmed |
| Plans with a BAA | None | Not stated |
| How to get it | — | — |
| AI features outside the BAA | None listed | None listed |
| Sources | 2 sources | 3 sources |
| Last checked | Oct 11, 2026 | Oct 11, 2026 |
Every plan
Zapier
- All plans (Free, Pro, Team, Enterprise)Zapier's Data Privacy FAQ says using regulated healthcare data, including PHI under HIPAA, is not supported, and that Zapier cannot sign BAAs or equivalent agreements. No plan is listed as an exception.No BAA
Make.com
- All plans (Free, Core, Pro, Teams, Enterprise)The security page and the terms and conditions do not mention HIPAA, PHI or BAAs. In a February 2023 community post that appears to come from Make staff, Make said it was still gauging customer demand for HIPAA. There is no newer official statement.Not confirmed
If you handle patient data
Don’t use either for protected health information unless the vendor signs a BAA with you in writing. See Zapier alternatives and Make.com alternatives that do.
More comparisons
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.