Hi friends. I am trying to build applications for healthcare to integrate with data from an EPIC electronic health record system. This requires HIPAA compliance. I was wondering if anyone had best practices to share on how to stay in compliance? My default assumption is that even if I have encrypte…

Hi there, Thanks for reaching out! Retool does not sign Business Associate Agreements (BAAs) ; however, several of our customers who needed to comply with HIPAA prefer our on-premise (self-hosted) deployment. We have structured the self-hosted version of Retool in a way that helps organizations mai…

Healthcare application development best practices for HIPAA

💬 App Building

Topic		Replies	Views
Native tooling for HIPAA-compliance in Retool 💬 App Building	2	262	August 4, 2025
HIPAA: how did you handle session timeouts, other reqs? 💬 Self Hosted Retool	2	156	April 15, 2025
Business Associate Agreement 💬 Account & User Management	4	1267	February 16, 2026
Ensuring Secure Data Transmission and Storage with Retool and Cloud Service Providers 🤝 Discussion	1	383	July 29, 2024
Retool due diligence: vendor lock-in and licensing 💬 App Building	6	224	April 27, 2026

Healthcare application development best practices for HIPAA

Related topics