The HIPAA Privacy Rule provides federal protections for personal health information held by covered entities and gives patients an array of rights with respect to that information. Customers who want to build healthcare applications on Salesforce that comply with US HIPAA can contact your account representative regarding a Business Associate Addendum (BAA).

For the current BAA Restrictions and HIPAA Covered Services refer to https://www.salesforce.com/company/legal/business-associate-addendum-restrictions