HIPAA Guidelines

Chargebee supports HIPAA compliance within its billing and subscription management platform.

Business Associate Agreement (BAA)

If a customer plans to share electronic Protected Health Information (ePHI) with Chargebee through the platform, the customer must first notify Chargebee. Chargebee will then assess whether handling ePHI is required in that context.

• Where appropriate, Chargebee may enter into a Business Associate Agreement (BAA) with the customer.

• Customers must not share ePHI with Chargebee unless a BAA has been fully executed.

Scope of Coverage

An executed BAA applies only to Chargebee’s core billing and subscription management platform.

It does not cover:

• Any middleware, third-party integrations, or other components used with the platform.

• Other Chargebee products or services, such as Chargebee Receivables, Chargebee RevRec, Chargebee Retention, and Chargebee Reveal.

Key Notes for Customers

• A BAA is a prerequisite for sharing ePHI with Chargebee.

• The scope of the BAA is limited to the core platform only.

• Customers must ensure that ePHI is not shared through unsupported products, services, or integrations.

Next Steps

• To request a BAA, please contact legal@chargebee.com.
• Do not share ePHI with Chargebee until a BAA has been fully executed.