Is Datadog HIPAA compliant?

Observability & monitoring · vendor site ↗

Signs a BAAPHI with conditionsSOC 2 Type II
Will Datadog sign a HIPAA BAA?
Yes — Datadog will sign a HIPAA Business Associate Agreement (BAA).
Datadog will sign a BAA with customers that transmit ePHI through its HIPAA-eligible services. PHI processing is scoped to designated HIPAA-Eligible Services plus a list of Extended Eligible Services; the BAA imposes restrictions (no Live Chat support, no sharing logs/security signals, no non-eligible third-party generative AI).
PHI eligibility
PHI may be processed only within Datadog's designated HIPAA-Eligible / Extended Eligible Services and only under a signed BAA, with customers responsible for configuring services consistent with their HIPAA obligations.
SOC 2
SOC 2 Type II
Trust center
Sub-processors
Notes
Coverage is service-scoped; non-eligible features must be disabled in PHI environments. SOC 2 Type II is referenced in Datadog's broader compliance materials.
Last verified 2026-05-31confidence: high· Vendor terms change — confirm directly with Datadog before storing PHI.

Get notified when this changes

We track Datadog's BAA and HIPAA status. Leave your email and we'll send one note if the verdict on this page changes.

One email per change. No newsletter, no selling your address.

How to request and sign a BAA with Datadog

Yes — Datadog will sign a HIPAA Business Associate Agreement (BAA).

Request routeBy request — via trust center or support
  1. 1
    Confirm your account is covered
    Datadog will sign a BAA with customers that transmit ePHI through its HIPAA-eligible services. PHI processing is scoped to designated HIPAA-Eligible Services plus a list of Extended Eligible Services; the BAA imposes restrictions (no Live Chat support, no sharing logs/security signals, no non-eligible third-party generative AI).
  2. 2
    Request the Business Associate Agreement
    Datadog provides the BAA on request. Open a request through Datadog's trust center and ask for the current Business Associate Agreement covering your plan.
  3. 3
    Confirm what PHI is allowed before you store any
    PHI may be processed only within Datadog's designated HIPAA-Eligible / Extended Eligible Services and only under a signed BAA, with customers responsible for configuring services consistent with their HIPAA obligations. Match your configuration to this scope before putting protected health information into Datadog.
Last verified 2026-05-31 · Plan tiers and BAA terms change often — confirm the current process directly with Datadog before you rely on it. This is cited public information, not legal advice.

Frequently asked questions

Does Datadog sign a HIPAA Business Associate Agreement (BAA)?
Yes — Datadog will sign a HIPAA Business Associate Agreement (BAA). Datadog will sign a BAA with customers that transmit ePHI through its HIPAA-eligible services. PHI processing is scoped to designated HIPAA-Eligible Services plus a list of Extended Eligible Services; the BAA imposes restrictions (no Live Chat support, no sharing logs/security signals, no non-eligible third-party generative AI).
Is Datadog HIPAA compliant?
Datadog can be used in a HIPAA-compliant way: it signs a Business Associate Agreement (BAA), which HIPAA requires before you process PHI with a vendor. PHI may be processed only within Datadog's designated HIPAA-Eligible / Extended Eligible Services and only under a signed BAA, with customers responsible for configuring services consistent with their HIPAA obligations.
Can you store PHI (protected health information) in Datadog?
PHI may be processed only within Datadog's designated HIPAA-Eligible / Extended Eligible Services and only under a signed BAA, with customers responsible for configuring services consistent with their HIPAA obligations.
Is Datadog SOC 2 certified?
Datadog reports a SOC 2 Type II attestation according to its public security documentation.
How do I request a HIPAA BAA from Datadog?
Datadog provides the BAA on request. Open a request through Datadog's trust center and ask for the current Business Associate Agreement covering your plan. Confirm current terms directly with Datadog before storing PHI.
What plan do I need to sign a BAA with Datadog?
Datadog will sign a BAA with customers that transmit ePHI through its HIPAA-eligible services. PHI processing is scoped to designated HIPAA-Eligible Services plus a list of Extended Eligible Services; the BAA imposes restrictions (no Live Chat support, no sharing logs/security signals, no non-eligible third-party generative AI).

Sources

https://docs.datadoghq.com/data_security/hipaa_compliance/
Supports: Datadog signs a BAA for customers transmitting ePHI; BAA restrictions on support, log sharing, and generative AIdated: undated
https://www.datadoghq.com/legal/hipaa-eligible-services/
Supports: Designated HIPAA-Eligible / Extended Eligible Services may process PHI under an applicable BAAdated: undated
This page is cited public information, not legal or compliance advice. A BAA's availability can depend on your specific plan, region, and contract. Always confirm current terms with Datadog before processing protected health information.

Check another vendor