Is Datadog HIPAA compliant?
Signs a BAAPHI with conditionsSOC 2 Type II
Will Datadog sign a HIPAA BAA?
Yes — Datadog will sign a HIPAA Business Associate Agreement (BAA).
Datadog will sign a BAA with customers that transmit ePHI through its HIPAA-eligible services. PHI processing is scoped to designated HIPAA-Eligible Services plus a list of Extended Eligible Services; the BAA imposes restrictions (no Live Chat support, no sharing logs/security signals, no non-eligible third-party generative AI).
PHI eligibility
PHI may be processed only within Datadog's designated HIPAA-Eligible / Extended Eligible Services and only under a signed BAA, with customers responsible for configuring services consistent with their HIPAA obligations.
SOC 2
SOC 2 Type II
Trust center
Sub-processors
Notes
Coverage is service-scoped; non-eligible features must be disabled in PHI environments. SOC 2 Type II is referenced in Datadog's broader compliance materials.
Get notified when this changes
We track Datadog's BAA and HIPAA status. Leave your email and we'll send one note if the verdict on this page changes.
How to request and sign a BAA with Datadog
Yes — Datadog will sign a HIPAA Business Associate Agreement (BAA).
Request routeBy request — via trust center or support
- 1Confirm your account is coveredDatadog will sign a BAA with customers that transmit ePHI through its HIPAA-eligible services. PHI processing is scoped to designated HIPAA-Eligible Services plus a list of Extended Eligible Services; the BAA imposes restrictions (no Live Chat support, no sharing logs/security signals, no non-eligible third-party generative AI).
- 2Request the Business Associate AgreementDatadog provides the BAA on request. Open a request through Datadog's trust center and ask for the current Business Associate Agreement covering your plan.
- 3Confirm what PHI is allowed before you store anyPHI may be processed only within Datadog's designated HIPAA-Eligible / Extended Eligible Services and only under a signed BAA, with customers responsible for configuring services consistent with their HIPAA obligations. Match your configuration to this scope before putting protected health information into Datadog.
Last verified 2026-05-31 · Plan tiers and BAA terms change often — confirm the current process directly with Datadog before you rely on it. This is cited public information, not legal advice.
Frequently asked questions
Does Datadog sign a HIPAA Business Associate Agreement (BAA)?
Yes — Datadog will sign a HIPAA Business Associate Agreement (BAA). Datadog will sign a BAA with customers that transmit ePHI through its HIPAA-eligible services. PHI processing is scoped to designated HIPAA-Eligible Services plus a list of Extended Eligible Services; the BAA imposes restrictions (no Live Chat support, no sharing logs/security signals, no non-eligible third-party generative AI).
Is Datadog HIPAA compliant?
Datadog can be used in a HIPAA-compliant way: it signs a Business Associate Agreement (BAA), which HIPAA requires before you process PHI with a vendor. PHI may be processed only within Datadog's designated HIPAA-Eligible / Extended Eligible Services and only under a signed BAA, with customers responsible for configuring services consistent with their HIPAA obligations.
Can you store PHI (protected health information) in Datadog?
PHI may be processed only within Datadog's designated HIPAA-Eligible / Extended Eligible Services and only under a signed BAA, with customers responsible for configuring services consistent with their HIPAA obligations.
Is Datadog SOC 2 certified?
Datadog reports a SOC 2 Type II attestation according to its public security documentation.
How do I request a HIPAA BAA from Datadog?
Datadog provides the BAA on request. Open a request through Datadog's trust center and ask for the current Business Associate Agreement covering your plan. Confirm current terms directly with Datadog before storing PHI.
What plan do I need to sign a BAA with Datadog?
Datadog will sign a BAA with customers that transmit ePHI through its HIPAA-eligible services. PHI processing is scoped to designated HIPAA-Eligible Services plus a list of Extended Eligible Services; the BAA imposes restrictions (no Live Chat support, no sharing logs/security signals, no non-eligible third-party generative AI).
Sources
https://docs.datadoghq.com/data_security/hipaa_compliance/
https://www.datadoghq.com/legal/hipaa-eligible-services/
This page is cited public information, not legal or compliance advice. A BAA's availability can depend on your specific plan, region, and contract. Always confirm current terms with Datadog before processing protected health information.
Check another vendor
See all HIPAA compliant monitoring & observability tools →
Browse all 105 vendors by category →