foxit.com

Yes — **Knack offers a HIPAA-compliant/HIPAA-ready option**, but there’s an important distinction: **using Knack does not automatically make your application or organization HIPAA compliant.** According to Knack’s current documentation: - **Knack Health has HIPAA plans** specifically intended for applications handling PHI. [www.knack.com](https://www.knack.com/health/hipaa/?utm_source=chatgpt.com)[www.knack.com](https://www.knack.com/health/hipaa-backend/?utm_source=chatgpt.com) - A **Business Associate Agreement (BAA)** is available/included with the HIPAA plans. You should have the BAA signed **before putting PHI into Knack**. [www.knack.com](https://www.knack.com/health/hipaa/?utm_source=chatgpt.com)[www.knack.com](https://www.knack.com/health/hipaa-backend/?utm_source=chatgpt.com) - Security controls include **encryption in transit and at rest, role-based access controls, audit/change logs, 2FA, session timeouts, backups, and monitoring**. [www.knack.com](https://www.knack.com/health/hipaa/?utm_source=chatgpt.com)[www.knack.com](https://www.knack.com/health/soc-2/?utm_source=chatgpt.com) - Knack says it maintains **SOC 2 Type II** compliance as well. [www.knack.com](https://www.knack.com/health/soc-2/?utm_source=chatgpt.com) - **Third-party integrations are a major consideration:** if PHI leaves Knack through an integration/API/Flow, you are responsible for ensuring the receiving service is also appropriate for HIPAA use and has the necessary BAA where applicable. [docs.knack.com](https://docs.knack.com/docs/flows-and-third-party-compliance?utm_source=chatgpt.com) - Your organization remains responsible for things like **proper permissions, workflows, policies, employee training, risk assessments, and appropriate handling of PHI**. [docs.knack.com](https://docs.knack.com/docs/policies-and-training-requirements?utm_source=chatgpt.com) **Bottom line:** If you're evaluating Knack for storing patient information, I would consider it **a viable HIPAA platform provided you use the HIPAA plan, execute the BAA, configure it correctly, and vet every integration that touches PHI.** [Knack's HIPAA documentation](https://www.knack.com/health/hipaa/?utm_source=chatgpt.com) If you tell me **what you're planning to store/do in Knack** (e.g., patient intake forms, medical records, billing, case management), I can also tell you **whether I think that particular setup is HIPAA-safe and what I'd configure differently.** [Knack's HIPAA documentation](https://www.knack.com/health/hipaa/?utm_source=chatgpt.com)