Is signNow HIPAA compliant?
Yes, on signNow's corporate plans once you have asked support to sign the business associate agreement — HIPAA features are off by default on every account until that happens.
Applies to signNow. Last reviewed against airSlate's own documentation. Next review February 6, 2027.
Reviewed by David Kim — Billing and RCM Operations Director.
What you must do
- Be on a corporate plan. signNow's own guide states HIPAA compliance 'is only available on SignNow's corporate plans', though it never names the tiers — get the specific plan confirmed in writing when you sign.
- Contact airSlate SignNow support to request and execute the agreement. Their wording: 'HIPAA compliance is disabled by default for your airSlate SignNow account. To enable it, please contact airSlate SignNow support to sign a BAA.'
- Wait for activation. HIPAA-compliant features are switched on by the vendor after the agreement is signed — the sequence is agreement first, features second, patient documents last.
- Keep the executed copy; the published pages describe the process but are not themselves the agreement.
Does signNow sign a business associate agreement?
Yes. airSlate offers one. A corporate plan — signNow does not publicly name which tiers qualify. Contact airSlate SignNow support (or sales) to sign the agreement; the vendor then activates HIPAA features on the account.
What this means in practice
signNow's mechanic is worth understanding because it protects you from a half-configured state: HIPAA compliance is disabled by default on every account, and only the vendor switches it on, after the agreement is signed. There is no toggle to find in settings. That means an account sending patient consent forms before support has confirmed activation is simply not covered, whatever plan it is on.
The plan language is the vaguest part. signNow says HIPAA compliance is available only on its corporate plans and never names the tiers, so the tier question belongs in the same conversation as the agreement — in writing, before purchase. Do not infer eligibility from a plan's price or its name.
Feature-level scope is unpublished too. Nothing signNow posts says whether any features are excluded under the executed agreement, which cuts both ways: no known carve-outs, and no public promise either. The executed agreement is the only document that defines it, so read it rather than the marketing page.
How organizations get this wrong
The specific mistakes we see with signNow, not generic advice.
- Sending patient documents after signing the agreement but before signNow confirms HIPAA features are activated on the account — the sequence is agreement, activation, then patients.
- Buying a plan because it sounds corporate, when signNow never publicly names which tiers qualify.
- Assuming the airSlate document-automation products around signNow are covered by the same agreement without asking.
- Treating the marketing page's security certifications as the agreement, which the off-by-default mechanic makes exactly wrong.
What the agreement does not cover
- Every account in its default state — signNow is explicit that HIPAA compliance is disabled until the agreement is signed and the vendor activates it.
- Non-corporate plans, whatever their price.
- Scope beyond that is unpublished: no signNow page fetched for this entry lists feature-level exclusions, so settle them in the agreement itself.
Alternatives
Listed on merit. We take no payment for placement and use no affiliate links.
Where you want the plan requirement and covered features stated publicly
The incumbent most healthcare counterparties already have an account with
If documents need proposals and payment collection alongside the signature
Signing the agreement is step one. Proving it is step two.
Once you have the agreement with signNow, someone has to know it exists, where the copy is, when it needs revisiting and who owns it. That register is what a client's security questionnaire is actually asking about, and it is the section of an evidence pack most organizations cannot produce on request.
$79/month, 14-day free trial, no credit card. The checker itself stays free and needs no account.
Sources
Every statement above comes from airSlate’s own published documentation, read on the date shown.
- HIPAA Compliance | airSlate SignNow — airSlate. No publication date given. Read August 30, 2026.
- How to Achieve HIPAA Compliance with SignNow eSignature — airSlate. No publication date given. Read August 30, 2026.
Change history
- — First published.
This page is information, not certification and not legal advice. It reflects airSlate’s published documentation as read on August 30, 2026; vendors change their terms without notice, so confirm anything you rely on directly with the vendor. Whether your own use is compliant depends on your configuration, your executed agreement and how your staff actually work. No company can be “HIPAA certified” — no such designation exists.
Think something here is wrong or out of date? Tell us at support@hipaacompliancesoftware.org — corrections are published with a dated note in the change history above, never silently. See our editorial standards for how entries are researched and re-verified.