RegulationActiveUnited States
Health Insurance Portability and Accountability Act
HIPAA governs the privacy and security of Protected Health Information (PHI) in the United States. AI vendors operating in healthcare must meet HIPAA Security Rule requirements (access controls, audit logs, integrity, encryption) and sign BAAs with covered entities. HIPAA applies directly to many AI use cases in clinical decision support, diagnostics, and healthcare operations.
Jurisdiction
United States
Enforcement
See overview
Maximum penalty
Varies by violation
Vendors that support HIPAA
Sorted by coverage level. Full coverage shown first.
21 vendors
| Vendor | HQ | Founded | Size | Pricing | Coverage | Last checked |
|---|---|---|---|---|---|---|
| Scrut Automation | Palo Alto, United States | 2021 | 51-200 | Contact for pricing | Comprehensive | Sep 21, 2026 |
| Braintrust | San Francisco, United States | 2023 | 51-200 | Starter free ($0/mo, 1GB data/10k scores incl., overage $4/GB $2.50/1k); Pro $249/mo (5GB/50k incl., overage $3/GB $1.50/1k); Enterprise custom. | Comprehensive | Sep 21, 2026 |
| Hyperproof | Bellevue, United States | 2018 | — | No public prices or plan names on its pricing page; quoted on request. The AI-native third-party risk product includes a baseline of AI credits, with more sold at discounted tiers. | Comprehensive | Oct 15, 2026 |
| Secureframe | San Francisco, United States | 2020 | 201-500 | Three plans: Fundamentals (starting at $7,500/year, one compliance framework), Complete (quote only; adds advanced versions of third-party risk, risk management, user access reviews, Trust Center and questionnaire automation, plus SSO/SCIM and custom integrations) and Defense (quote only; CMMC tooling such as SSP and POA&M). Additional workspaces are an add-on. | Comprehensive | Oct 15, 2026 |
| Sprinto | India | 2020 | — | No public prices. Three plans (Foundation, Growth, Platform) are quoted by sales. Foundation includes 25+ automated frameworks, 20 AI-powered security questionnaires a year and an AI systems inventory. Add-ons include additional frameworks, AI Governance, Enterprise Risk Management, Enterprise Trust Management and Enterprise Vendor Risk Management. | Comprehensive | Oct 15, 2026 |
| Thoropass | New York, United States | 2019 | — | No public prices or plan tiers. Services (Thoropass Audit, Audit-Ready Pentesting, Vulnerability Scanning, Compliance Suite) are sold on a tailored quote. | Comprehensive | Oct 15, 2026 |
| Drata | United States | 2020 | — | GRC plans (Foundation, Advanced, Enterprise) and Assurance plans (Trust Center and questionnaires) are quoted; drata.com shows no prices. Its AWS Marketplace listing charges a $25,000 platform fee for a 100-FTE organization plus $7,500 per framework, for a 12-month contract. | Comprehensive | Oct 15, 2026 |
| Vanta | San Francisco, United States | 2018 | 501-1000 | Four plans: Essentials, Plus, Professional and Enterprise. No prices on vanta.com; its AWS Marketplace listing gives 12-month starting prices for 1-20 employees: Essentials $14,000, Plus $21,500, Professional $23,000. Enterprise is quoted. Third-party risk management is a separate product ($13,600 a year for up to 50 vendors on AWS). | Comprehensive | Oct 15, 2026 |
| ServiceNow AI Control Tower | Santa Clara, United States | 2004 | 1000+ | Contact for pricing | Partial | Sep 21, 2026 |
| BigID | New York, United States | 2016 | 501-1000 | Contact for pricing | Partial | Sep 21, 2026 |
| Arthur | New York, United States | 2019 | 51-200 | Free tier available; Premium at $60/mo; Enterprise custom, contact sales. | Partial | Sep 21, 2026 |
| Traccia | United States | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| PrivacyScrubber | United States | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| Crelis | United States | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| Meilynx | United States | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| Scytale | Israel | 2021 | 51-200 | No public prices. Platform packages (Build, Scale, Enterprise), startup bundles (Build Starter, Build DFY, Build Stronger) and consulting packages (LaunchReady, StayReady, ComplianceShield) are all quoted after a demo. | Partial | Oct 15, 2026 |
| Nightfall AI | San Francisco, United States | 2018 | — | Two packages, priced per user per year: Foundation Edition (DLP across SaaS, email, AI apps and endpoints, with real-time blocking) and Premier Edition (adds AI agent security: hooks for Cursor, Claude Code and VS Code, MCP discovery, Claude Cowork and Claude Enterprise monitoring, SIEM export), offered as Tier 1 (up to 3 apps) or Tier 2 (all supported apps). The pricing page shows no amounts; it says final pricing depends on user count and data volume and offers a free 7-day proof of value. Each user license covers two endpoint devices. Data Discovery and Classification is an add-on with 150 GB included and paid 1 TB, 3 TB, 5 TB and 20 TB packs. | Partial | Oct 15, 2026 |
| Fiddler AI | Palo Alto, United States | 2018 | — | Three plans: Free (real-time guardrails for hallucinations, toxicity, PII/PHI, prompt injection and jailbreaks, powered by Fiddler's Centor models); Developer at $0.002 per trace (adds unified observability with tests and experiments for agentic and predictive systems, custom evaluators and bring-your-own judge, role-based access control and SSO; SaaS only); and Enterprise, priced by sales (adds enterprise-grade guardrails and scale, SaaS, VPC or on-premises deployment, and a named customer success manager). The pricing page lists no trace or user limits. | Partial | Oct 15, 2026 |
| F5 AI Guardrails | Seattle, United States | 1996 | — | F5 doesn't publish prices; its AI Guardrails page links to a free trial and a sales contact. AWS Marketplace lists F5 AI Guardrails (a container image for Amazon EKS) with a 12-month "F5 Guardrails AI" dimension at $100,000.00, but the listing says that price is a placeholder and that pricing is configured by F5 as a private offer. AWS Marketplace also lists F5 AI Red Team at $100,000.00 for a 12-month contract on its "Red Team Reports" dimension; the listing says cost scales with the number of report units bought and doesn't say how many reports that price covers. | Adjacent | Oct 15, 2026 |
| Harmonic Security | London, United Kingdom | 2023 | — | Three packages, Explore, Guide and Command (marked most popular), are listed on Harmonic's pricing page without prices; the page offers a demo. AWS Marketplace lists "Harmonic Security - Explore" at $163.00 per user per year on a 12-month contract, with a 200-user minimum and private offers for custom quotes. | Adjacent | Oct 15, 2026 |
| Galileo | San Francisco, United States | 2021 | — | Sold as Splunk Agent Observability: Splunk lists it "starting at just $100 per month per 1.2 million spans annually, billed annually", including 500 million Luna tokens and 5 Luna fine-tuning runs a year; a free edition is linked. Galileo's own Free and Pro plans are no longer published (galileo.ai/pricing redirects to Splunk). | limited | Oct 15, 2026 |
Compare across industries
See which vendors support HIPAA in your sector.
HIPAA in Defense & National SecurityHIPAA in EducationHIPAA in Employment & HRHIPAA in Energy & UtilitiesHIPAA in Financial ServicesHIPAA in Government & Public SectorHIPAA in HealthcareHIPAA in InsuranceHIPAA in Legal ServicesHIPAA in ManufacturingHIPAA in Media & EntertainmentHIPAA in Retail & E-commerceHIPAA in SaaS & TechnologyHIPAA in Telecommunications
Last reviewed April 24, 2026. Informational summary only — not legal advice. Consult qualified counsel for specific obligations.