BBAA Atlas
For compliance & security teams

Monitor your whole vendor list — and pull the data programmatically

The free lookup answers one vendor at a time. Teams running real HIPAA due diligence track dozens of vendors and need to know the moment a BAA or PHI verdict changes. That's what this is.

Continuous monitoring of your list

Give us the vendors you depend on. We watch their BAA availability, PHI eligibility and sub-processor changes and email you the moment a verdict moves — so a quiet terms change never catches an audit by surprise.

Programmatic & bulk access

Pull all 105 vendor verdicts — cited, date-stamped — via a JSON API or a one-shot bulk export. Wire BAA status straight into your own vendor-risk register or onboarding checklist.

Priority re-verification

Need a vendor that isn't covered yet, or a fresh re-check before a contract? Request it and we verify it next, with the source links your compliance file needs.

$625/moto monitor up to 25 vendors
≈ $7,500/yr, incl. full-dataset API access

Stated pricing, no surprises

Monitoring up to 25 vendors plus programmatic access to the full 105-vendor dataset starts at $625/mo. Larger vendor lists, SSO and audit exports scale up to $100K/yr for enterprise.

Leave your email and we'll set up your vendor list and confirm pricing for your list size. There's no checkout here — this is a request, not a charge.

We'll reply with your vendor list setup and pricing for your list size. No card, no checkout here.

How is this different from the free email alerts?
The free “Notify me” on a vendor page watches that one vendor and sends a one-off note. This monitors your entire list, gives you the data via API/bulk export, and includes priority re-verification — built for a team, not a single lookup.
What do I get in the API / bulk export?
Every vendor's BAA status, PHI eligibility, SOC 2, trust-center and sub-processor links, the plan tier a BAA is gated to, a confidence level and a last-verified date — the same cited fields you see on each vendor page, as structured JSON for all 105 vendors.
Is this legal or compliance advice?
No. BAA Atlas aggregates cited public information so your team can move faster on due diligence. Always confirm a vendor's current BAA and PHI eligibility directly with the vendor before storing PHI.

Browse all 105 vendors by category →