Hi friends. I am trying to build applications for healthcare to integrate with data from an EPIC electronic health record system. This requires HIPAA compliance. I was wondering if anyone had best practices to share on how to stay in compliance? My default assumption is that even if I have encrypte…

Hi there, Thanks for reaching out! Retool does not sign Business Associate Agreements (BAAs) ; however, several of our customers who needed to comply with HIPAA prefer our on-premise (self-hosted) deployment. We have structured the self-hosted version of Retool in a way that helps organizations mai…

Healthcare application development best practices for HIPAA

💬 App Building

Topic		Replies	Views
Native tooling for HIPAA-compliance in Retool 💬 App Building	2	87	August 4, 2025
HIPAA: how did you handle session timeouts, other reqs? 💬 Self Hosted Retool	2	85	April 15, 2025
Business Associate Agreement 🤝 Discussion	3	1056	October 2, 2024
Ensuring Secure Data Transmission and Storage with Retool and Cloud Service Providers 🤝 Discussion	1	324	July 29, 2024
Using Retool to write directly in the db 💬 App Building	6	102	July 14, 2025

Healthcare application development best practices for HIPAA

Related topics