Hosting & Infrastructure
HIPAA-Eligible Services
The specific cloud services a provider agrees to cover under its BAA; PHI may only live inside them.
HIPAA-eligible services are the specific cloud services a provider agrees to cover under its Business Associate Agreement. AWS publishes its list as the HIPAA Eligible Services Reference, with more than 160 services on it as of 2026. Azure and Google Cloud maintain equivalent lists.
Eligible does not mean compliant. It means the service may hold protected health information once you configure it correctly. PHI placed in a service that is not on the list falls outside the BAA entirely, even inside an otherwise covered account. The AWS specifics are in is AWS HIPAA compliant.