No, Wix is not a HIPAA-compliant service. There is no mention of HIPAA compliance on their website and no indication that the company will sign a Business Associate Agreement.
Wix is a popular website builder. While Wix offers security features, these measures aren’t sufficient for HIPAA compliance. Passive scanning is done periodically, but customers don’t have access to real-time monitoring to protect against hacking.
A signed Business Associate Agreement (BAA) is essential for HIPAA compliance. Since Wix doesn’t sign a BAA with its customers, this service shouldn’t be used with patient health information.
Certain Wix features can be HIPAA compliant when paired with other services. Wix partners with Google G Suite to integrate email hosting. When purchasing Wix services, you can meet HIPAA requirements for email if you use specific security settings and sign a BAA with Google. Websites made with Wix, however, are not HIPAA compliant.
