learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech

Yes. As of **August 2026**, there are several no-code/low-code platforms that will sign a HIPAA Business Associate Agreement (BAA). The important distinction is that **“HIPAA-capable” is not the same as “will sign a BAA for the plan you're buying.”** ### Strongest options | Platform | BAA? | Best fit | My take | |---|---|---|---| | **Caspio** | ✅ Yes | Full database-backed apps, portals, workflows | **Excellent choice** | | **Knack Health** | ✅ Yes | Healthcare apps, patient portals, operational systems | **Excellent choice** | | **Zoho Creator** | ✅ Yes | Custom business/healthcare apps | **Good value** | | **Microsoft Power Apps** | ✅ Yes* | Enterprises already using Microsoft/Dataverse | **Excellent for Microsoft shops** | | **Quickbase** | ✅ Yes | Enterprise operational workflows | **Good, but expensive** | | **Airtable** | ✅ Yes* | Lightweight databases/internal apps | **Good for simpler use cases** | | **Smartsheet** | ✅ Yes* | Workflow/project/operations apps | **Good for workflow-heavy use cases** | | **Formstack** | ✅ Yes | Forms, intake, documents, e-signatures | **Excellent for forms/workflows** | \*Typically requires the appropriate enterprise/HIPAA-covered plan or agreement. #### 1. Caspio Caspio is probably one of the first platforms I'd evaluate. Its **HIPAA Edition includes a signed BAA**, dedicated HIPAA environment, encryption, audit trails, and unlimited users. Current pricing shown by Caspio starts at **$800/month with a one-year term**. [www.caspio.com](https://www.caspio.com/compliance/hipaa/?utm_source=chatgpt.com) [Caspio HIPAA Edition](https://www.caspio.com/hipaa-edition/) #### 2. Knack Health Knack now has a healthcare-specific product, **Knack Health**, with a signed BAA, encrypted storage/transmission, role-based permissions, and record-change logs. Its HIPAA plans are specifically designed for healthcare applications. [www.knack.com](https://www.knack.com/health/hipaa-database/?utm_source=chatgpt.com) [Knack Health](https://www.knack.com/health/) This is particularly interesting if you're building something like a **patient portal, care-management system, home-care application, intake system, or internal healthcare operations app**. #### 3. Zoho Creator Zoho Creator supports HIPAA workflows and allows customers to request its BAA. It has ePHI field designation, encryption, granular permissions, audit trails, and backups. [help.zoho.com](https://help.zoho.com/portal/en/kb/creator/security/hipaa/articles/zoho-creator-hipaa-compliance-guide?utm_source=chatgpt.com) [Zoho Creator HIPAA information](https://help.zoho.com/portal/en/kb/creator/security/hipaa/articles/zoho-creator-hipaa-compliance-guide) One caveat: **the BAA specifies which Zoho services are covered**, so don't assume every Zoho product/integration is automatically inside your HIPAA boundary. [www.zoho.com](https://www.zoho.com/hipaa.html?utm_source=chatgpt.com) #### 4. Microsoft Power Apps Microsoft Power Apps is another strong option if you're comfortable with the Microsoft ecosystem. Microsoft provides a HIPAA BAA covering its in-scope services, and Power Apps/Dataverse can be used to build custom applications. [learn.microsoft.com](https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech?utm_source=chatgpt.com) [Microsoft HIPAA compliance documentation](https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech) The downside is that Power Apps is more enterprise-oriented and can become complicated from a licensing/architecture standpoint. #### 5. Quickbase Quickbase supports HIPAA with a BAA, but HIPAA access is generally associated with its higher-tier/business engagements rather than the entry-level offering. [www.caspio.com](https://www.caspio.com/blog/best-quickbase-alternative-for-no-code-apps-2026/?utm_source=chatgpt.com) ### Platforms I'd be careful about **Bubble:** I would **not** use Bubble for an application that directly handles PHI. Bubble's own documentation currently says that the platform does **not** meet HIPAA requirements and that it does not support HIPAA-compliant apps. [manual.bubble.io](https://manual.bubble.io/help-guides/infrastructure/compliance/hipaa?utm_source=chatgpt.com) **Glide:** It's a popular no-code platform, but I wouldn't put it in the same "confirmed BAA + healthcare-specific infrastructure" bucket without getting written confirmation from Glide for your exact plan and use case. **Webflow:** Fine for a marketing site around a healthcare product, but don't treat Webflow itself as your PHI datastore. You can, for example, embed a BAA-backed Formstack form into a Webflow site. [webflow.com](https://webflow.com/integrations/formstack?utm_source=chatgpt.com) ### If you're building an actual healthcare product I'd narrow the field to: **Caspio → Knack Health → Power Apps → Zoho Creator** And I'd choose based on what you're building: - **Patient-facing/custom database app:** Caspio or Knack - **Healthcare-specific internal application:** Knack Health - **Microsoft enterprise environment:** Power Apps + Dataverse - **Budget-conscious custom app:** Zoho Creator - **Forms/intake/e-signatures:** Formstack - **Complex enterprise operations:** Quickbase One crucial point: **the BAA is only one piece of HIPAA compliance.** Your integrations, email provider, analytics, file storage, authentication, AI services, and other subprocessors that touch PHI may each need appropriate HIPAA coverage/BAAs as well. Formstack, for example, explicitly warns that the customer remains responsible for compliance across the entire workflow and integrations. [help.formstack.com](https://help.formstack.com/hc/en-us/articles/44593118493843-Maintaining-HIPAA-Compliance-with-Formstack?utm_source=chatgpt.com) If you tell me **what you're trying to build** (e.g. patient portal, SaaS healthcare app, intake form, CRM, scheduling system, home-care app), I can narrow this down to the **3 best platforms and compare their approximate costs, BAA requirements, database capabilities, APIs, and limitations**. [Caspio HIPAA Edition](https://www.caspio.com/hipaa-edition/) [Knack Health](https://www.knack.com/health/) [Zoho Creator HIPAA information](https://help.zoho.com/portal/en/kb/creator/security/hipaa/articles/zoho-creator-hipaa-compliance-guide) [Microsoft HIPAA compliance documentation](https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech) Caspio Knack Zoho Microsoft Power Apps | Platform | BAA? | Best fit | My take | |---|---|---|---| | **Caspio** | ✅ Yes | Full database-backed apps, portals, workflows | **Excellent choice** | | **Knack Health** | ✅ Yes | Healthcare apps, patient portals, operational systems | **Excellent choice** | | **Zoho Creator** | ✅ Yes | Custom business/healthcare apps | **Good value** | | **Microsoft Power Apps** | ✅ Yes* | Enterprises already using Microsoft/Dataverse | **Excellent for Microsoft shops** | | **Quickbase** | ✅ Yes | Enterprise operational workflows | **Good, but expensive** | | **Airtable** | ✅ Yes* | Lightweight databases/internal apps | **Good for simpler use cases** | | **Smartsheet** | ✅ Yes* | Workflow/project/operations apps | **Good for workflow-heavy use cases** | | **Formstack** | ✅ Yes | Forms, intake, documents, e-signatures | **Excellent for forms/workflows** | \*Typically requires the appropriate enterprise/HIPAA-covered plan or agreement. #### 1. Caspio Caspio is probably one of the first platforms I'd evaluate. Its **HIPAA Edition includes a signed BAA**, dedicated HIPAA environment, encryption, audit trails, and unlimited users. Current pricing shown by Caspio starts at **$800/month with a one-year term**. [www.caspio.com](https://www.caspio.com/compliance/hipaa/?utm_source=chatgpt.com) [Caspio HIPAA Edition](https://www.caspio.com/hipaa-edition/) #### 2. Knack Health Knack now has a healthcare-specific product, **Knack Health**, with a signed BAA, encrypted storage/transmission, role-based permissions, and record-change logs. Its HIPAA plans are specifically designed for healthcare applications. [www.knack.com](https://www.knack.com/health/hipaa-database/?utm_source=chatgpt.com) [Knack Health](https://www.knack.com/health/) This is particularly interesting if you're building something like a **patient portal, care-management system, home-care application, intake system, or internal healthcare operations app**. #### 3. Zoho Creator Zoho Creator supports HIPAA workflows and allows customers to request its BAA. It has ePHI field designation, encryption, granular permissions, audit trails, and backups. [help.zoho.com](https://help.zoho.com/portal/en/kb/creator/security/hipaa/articles/zoho-creator-hipaa-compliance-guide?utm_source=chatgpt.com) [Zoho Creator HIPAA information](https://help.zoho.com/portal/en/kb/creator/security/hipaa/articles/zoho-creator-hipaa-compliance-guide) One caveat: **the BAA specifies which Zoho services are covered**, so don't assume every Zoho product/integration is automatically inside your HIPAA boundary. [www.zoho.com](https://www.zoho.com/hipaa.html?utm_source=chatgpt.com) #### 4. Microsoft Power Apps Microsoft Power Apps is another strong option if you're comfortable with the Microsoft ecosystem. Microsoft provides a HIPAA BAA covering its in-scope services, and Power Apps/Dataverse can be used to build custom applications. [learn.microsoft.com](https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech?utm_source=chatgpt.com) [Microsoft HIPAA compliance documentation](https://learn.microsoft.com/en-us/compliance/regulatory/offering-hipaa-hitech) The downside is that Power Apps is more enterprise-oriented and can become complicated from a licensing/architecture standpoint. #### 5. Quickbase Quickbase supports HIPAA with a BAA, but HIPAA access is generally associated with its higher-tier/business engagements rather than the entry-level offering. [www.caspio.com](https://www.caspio.com/blog/best-quickbase-alternative-for-no-code-apps-2026/?utm_source=chatgpt.com) ### Platforms I'd be careful about **Bubble:** I would **not** use Bubble for an application that directly handles PHI. Bubble's own documentation currently says that the platform does **not** meet HIPAA requirements and that it does not support HIPAA-compliant apps. [manual.bubble.io](https://manual.bubble.io/help-guides/infrastructure/compliance/hipaa?utm_source=chatgpt.com) **Glide:** It's a popular no-code platform, but I wouldn't put it in the same "confirmed BAA + healthcare-specific infrastructure" bucket without getting written confirmation from Glide for your exact plan and use case. **Webflow:** Fine for a marketing site around a healthcare product, but don't treat Webflow itself as your PHI datastore. You can, for example, embed a BAA-backed Formstack form into a Webflow site. [webflow.com](https://webflow.com/integrations/formstack?utm_source=chatgpt.com) ### If you're building an actual healthcare product I'd narrow the field to: **Caspio → Knack Health → Power Apps → Zoho Creator** And I'd choose based on what you're building: - **Patient-facing/custom database app:** Caspio or Knack - **Healthcare-specific internal application:** Knack Health - **Microsoft enterprise environment:** Power Apps + Dataverse - **Budget-conscious custom app:** Zoho Creator - **Forms/intake/e-signatures:** Formstack - **Complex enterprise operations:** Quickbase One crucial point: **the BAA is only one piece of HIPAA compliance.** Your integrations, email provider, analytics, file storage, authentication, AI services, and other subprocessors that touch PHI may each need appropriate HIPAA coverage/BAAs as well. Formstack, for example, explicitly warns that the customer remains responsible for compliance across the entire workflow and integrations. [help.formstack.com](https://help.formstack.com/hc/en-us/articles/44593118493843-Maintaining-HIPAA-Compliance-with-Formstack?utm_source=chatgpt.com) If you tell me **what you're trying to build** (e.g. patient portal, SaaS healthcare app, intake form, CRM, scheduling system, home-care app), I can narrow this down to the **3 best platforms and compare their approximate costs, BAA requirements, database capabilities, APIs, and limitations**.