Is TigerConnect HIPAA compliant?
Yes, TigerConnect's standard agreement applies automatically through its terms of service unless you negotiate your own, but it is a sales-quoted enterprise product and the invitation text reaching the patient is still ordinary carrier SMS.
Applies to TigerConnect clinical collaboration and patient engagement. Last reviewed .
Researched and maintained by the CompyMax editorial team to our published standards.
What you must do
- Know which agreement governs you. TigerConnect's terms state that absent a separate agreement, where it acts as a business associate the parties are subject to its standard agreement, published and incorporated by reference.
- If your legal team wants negotiated terms, execute a separate agreement: it displaces the standard one.
- Buy through TigerConnect sales. There is no self-serve tier and no published pricing.
- Keep clinical detail out of the initial invitation text; the link is the gateway and the conversation is the protected part.
- Meet the covered entity obligations in the agreement: notify TigerConnect of limits in your notice of privacy practices, of revocations, and of restrictions you have agreed to.
- Plan around clinician-initiated contact: conversations are clinician-controlled, so patients cannot start one.
- Have counsel review the de-identification clause, which lets TigerConnect de-identify your records and retain ownership of what it creates.
Does TigerConnect sign a business associate agreement?
Yes. TigerConnect offers one. No published plan gate. The standard agreement applies wherever TigerConnect acts as a business associate under a services agreement. Nothing to request if you rely on the standard agreement: it is incorporated into the terms of service by reference. To negotiate your own, raise it during contracting.
What this means in practice
TigerConnect's agreement is not something you have to chase. Its terms of service say that where TigerConnect acts as a business associate and no separate agreement has been signed, both parties are bound by TigerConnect's standard agreement, published on its own site and incorporated by reference. Larger buyers still negotiate their own, which then displaces it.
The published terms are unusually specific in your favour. Patient information inside customer data may not be used to improve the services, customer data is processed and stored inside the United States, and liability for an improper disclosure of patient information is carved out of the ordinary cap. TigerConnect does keep the right to create and own de-identified data derived from your records.
For patient texting, understand the mechanics before you train staff. The patient receives an ordinary carrier text containing a link, and the conversation itself runs in a secure encrypted session with no app or password. Keep clinical detail out of that first invitation, and remember conversations are clinician-initiated: patients cannot start one.
How organizations get this wrong
- Putting clinical detail in the invitation text. Only the linked session is the secure conversation; the SMS carrying the link is ordinary carrier traffic.
- Not knowing which agreement applies. Check whether your contract has a negotiated one or silently relies on the standard version incorporated by reference.
- Overlooking the de-identification clause. TigerConnect may de-identify your patient records and owns what it creates.
- Expecting patients to start conversations. Engagement is clinician-controlled, so an inbound patient question has nowhere to land until staff reach out.
What the agreement does not cover
- Personal data about your own authorized users of the service, which the agreement states is not treated as patient information.
- De-identified information created from your records, which TigerConnect owns.
- The carrier SMS carrying the invitation link, as distinct from the secure session it opens.
- TigerConnect publishes no covered-services list, so scope is defined by whatever the services agreement names.
Alternatives
Published per-user pricing and a self-serve trial, which suits a small practice better
Keep a record of your TigerConnect agreement
Sources
- Business Associate Agreement: TigerConnect. Published April 22, 2026. Read July 29, 2026.
- TigerConnect Terms of Service Agreement: TigerConnect. Published July 6, 2026. Read July 29, 2026.
TigerConnect can change these terms at any time. If something here no longer matches what TigerConnect tells you, tell us.