uibakery.io

Yes — **Knack offers a HIPAA-compliant option**, but there’s an important distinction: **you need to use Knack’s HIPAA plan and have a signed Business Associate Agreement (BAA) before storing PHI.** [www.knack.com](https://www.knack.com/health/hipaa/?utm_source=chatgpt.com)[docs.knack.com](https://docs.knack.com/v3/docs/knack-health-hipaa-plans?utm_source=chatgpt.com) Knack says its HIPAA plans provide: - **Signed BAA** with covered entities - Encryption in transit and at rest - Role-based access controls - Audit/change logs - 2FA, SSO, and IP allowlisting - HIPAA-ready U.S. hosting and backups - SOC 2 Type II controls/reporting [www.knack.com](https://www.knack.com/health/hipaa/?utm_source=chatgpt.com) **The catch:** Knack itself doesn't make *your application* automatically HIPAA compliant. You're responsible for configuring access, handling PHI appropriately, maintaining policies/training, and ensuring that any third-party integrations that receive PHI also have appropriate HIPAA protections and BAAs. [docs.knack.com](https://docs.knack.com/docs/business-associate-agreements?utm_source=chatgpt.com) Also, Knack specifically says **not to put PHI into its free trial or non-HIPAA environment**; PHI should only be entered after you're on a HIPAA plan and the BAA is signed. [www.knack.com](https://www.knack.com/health/hipaa/?utm_source=chatgpt.com)[docs.knack.com](https://docs.knack.com/v3/docs/knack-health-hipaa-plans?utm_source=chatgpt.com) If you're considering Knack for a **specific use case** (e.g., patient records, intake forms, case management, CRM, or an internal database), tell me what you're storing and I can assess whether **Knack's HIPAA setup would actually satisfy the requirements for that workflow**.