Benefits of Compliance

About Advanced Compliance

Because personal health information may exist within Zendesk service data, the Advanced Compliance feature helps you fulfill your HIPAA obligations. With Advanced Compliance, you have the ability to enter into a Business Associate Agreement (BAA) with Zendesk. Additionally, Zendesk will provide you with appropriate security configuration options to help safeguard protected health information (PHI).

Note: Zendesk is limited to the status of a business associate. Moreover, Zendesk is not a holder of the Designated Record Set. The HIPAA requirements for a business associate are met through Zendesk's SOC2 and ISO27001/ISO27018 certifications and internal HIPAA audits.

With the purchase of Advanced Compliance, either directly or through the purchase of a plan that includes the Advanced Compliance functionality, Zendesk customers can sign Zendesk’s BAA. You can sign the BAA, via DocuSign, here: https://www.zendesk.com/company/business-associate-agreement/. Advanced Compliance and BAA only apply to features and functionality that are expressly stated to form part of the “Service” in the BAA. Additionally, Advanced Compliance and BAA do not apply to certain products, services, and features as further detailed in the BAA. For a list of covered and exempted services, see Zendesk Services eligible for coverage by the BAA, below. However, it is important to note that the information in the BAA overrides the information in this article, in the event of any conflict.

Zendesk services eligible for coverage by the BAA

For customers who have purchased the Advanced Security add-on, or the Advanced Compliance add-on, or are entitled to the Advanced Compliance add-on within their Zendesk Suite Service Plan, the following table shows the current list of HIPAA Enabled Subscription Plans and the applicable Services covered by the BAA under that Service Plan: