Practical references
Tools and references
We keep these references for teams building healthcare software: what the HIPAA rules ask of a build, which vendors sign a HIPAA BAA and what the agreement must say, how the major clouds compare, which cloud services a BAA covers, and roughly what the cloud bill will be. Each one is free, cites its sources and shows the date we last verified it, because vendor terms and prices change.
Which Vendors Sign a HIPAA BAA, and on Which Plan
Cloud platforms, AI APIs and SaaS tools that will sign a HIPAA Business Associate Agreement, the plan tier that unlocks it, and whether it costs extra.
Last verified Open referenceHIPAA BAA Review Checklist
Check a Business Associate Agreement against the terms HIPAA requires, spot the clauses vendors leave out, and see what is worth negotiating before you sign.
Last verified Open referenceHIPAA Compliance Checklist for Software Development
The HIPAA Security, Breach and Privacy Rule duties that touch software, mapped to engineering work, with the CFR citation and evidence to keep for each.
Last verified Open referenceAWS vs Azure vs Google Cloud for Healthcare, 2026
Compare AWS, Azure and Google Cloud for healthcare on 17 factors: getting the BAA, what it costs, compliance evidence, egress pricing and startup credits.
Last verified Open referenceAWS HIPAA Eligible Services List, Plus GCP & Azure
Search the AWS HIPAA eligible services list, plus Google Cloud and Azure services under each BAA, with conditions, exclusions and a source for every entry.
Last verified Open referenceHealthcare Cloud Cost Estimator
Pick the managed services a healthcare system needs and estimate the monthly cloud bill on AWS, Google Cloud or Azure from public list prices.
Last verified Open reference