BBAA Atlas

Is MongoDB Atlas HIPAA compliant?

Managed database · vendor site ↗

BAA on select plansPHI with conditionsSOC 2 Type II
Will MongoDB Atlas sign a HIPAA BAA?
Sometimes — MongoDB Atlas signs a HIPAA BAA only on specific plans or add-ons.
MongoDB has a standard Business Associate Addendum presented for signature, obtained by contacting the MongoDB Sales team rather than self-serve. The BAA covers MongoDB Atlas, Atlas App Services, Charts, Atlas Serverless, Cloud Manager, Atlas Data Lake and Atlas for Government; beta/preview products are out of scope.
PHI eligibility
MongoDB Cloud is HIPAA-ready: PHI may be processed and stored only after a signed BAA is in place and only on BAA-covered (non-beta) services, with the customer responsible for its own HIPAA compliance.
SOC 2
SOC 2 Type II
Trust center
mongodb.com ↗
Sub-processors
trust.mongodb.com ↗
Notes
BAA requires contacting Sales (not available on free/self-serve sign-up), hence plan_gated. SOC 2 Type II report (auditor Schellman) covers Atlas and related services across all regions; beta/preview features excluded.
Last verified 2026-05-31confidence: high· Vendor terms change — confirm directly with MongoDB Atlas before storing PHI.

Get notified when this changes

We track MongoDB Atlas's BAA and HIPAA status. Leave your email and we'll send one note if the verdict on this page changes.

One email per change. No newsletter, no selling your address.

How to request and sign a BAA with MongoDB Atlas

Sometimes — MongoDB Atlas signs a HIPAA BAA only on specific plans or add-ons.

Request routeSelf-serve — enable it in your account
  1. 1
    Get on a qualifying plan
    MongoDB has a standard Business Associate Addendum presented for signature, obtained by contacting the MongoDB Sales team rather than self-serve. The BAA covers MongoDB Atlas, Atlas App Services, Charts, Atlas Serverless, Cloud Manager, Atlas Data Lake and Atlas for Government; beta/preview products are out of scope.
  2. 2
    Request the Business Associate Agreement
    MongoDB Atlas lets you obtain the BAA without a sales call. Follow the path named in the plan requirement above — typically an in-product toggle or a billing / compliance settings page — then request and accept the agreement from your own account.
  3. 3
    Confirm what PHI is allowed before you store any
    MongoDB Cloud is HIPAA-ready: PHI may be processed and stored only after a signed BAA is in place and only on BAA-covered (non-beta) services, with the customer responsible for its own HIPAA compliance. Match your configuration to this scope before putting protected health information into MongoDB Atlas.
Before you sign — watch for
  • No BAA on the free / consumer tier — you must be on a qualifying paid plan first.
  • Beta / early-access features can be excluded from BAA coverage — keep PHI out of them.
Last verified 2026-05-31 · Plan tiers and BAA terms change often — confirm the current process directly with MongoDB Atlas before you rely on it. This is cited public information, not legal advice.

Frequently asked questions

Does MongoDB Atlas sign a HIPAA Business Associate Agreement (BAA)?
Sometimes — MongoDB Atlas signs a HIPAA BAA only on specific plans or add-ons. MongoDB has a standard Business Associate Addendum presented for signature, obtained by contacting the MongoDB Sales team rather than self-serve. The BAA covers MongoDB Atlas, Atlas App Services, Charts, Atlas Serverless, Cloud Manager, Atlas Data Lake and Atlas for Government; beta/preview products are out of scope.
Is MongoDB Atlas HIPAA compliant?
MongoDB Atlas can be HIPAA-compliant only on the specific plans or add-ons where it will sign a Business Associate Agreement (BAA). MongoDB Cloud is HIPAA-ready: PHI may be processed and stored only after a signed BAA is in place and only on BAA-covered (non-beta) services, with the customer responsible for its own HIPAA compliance.
Can you store PHI (protected health information) in MongoDB Atlas?
MongoDB Cloud is HIPAA-ready: PHI may be processed and stored only after a signed BAA is in place and only on BAA-covered (non-beta) services, with the customer responsible for its own HIPAA compliance.
Is MongoDB Atlas SOC 2 certified?
MongoDB Atlas reports a SOC 2 Type II attestation according to its public security documentation.
How do I request a HIPAA BAA from MongoDB Atlas?
MongoDB Atlas lets you obtain the BAA without a sales call. Follow the path named in the plan requirement above — typically an in-product toggle or a billing / compliance settings page — then request and accept the agreement from your own account. Confirm current terms directly with MongoDB Atlas before storing PHI.
What plan do I need to sign a BAA with MongoDB Atlas?
MongoDB has a standard Business Associate Addendum presented for signature, obtained by contacting the MongoDB Sales team rather than self-serve. The BAA covers MongoDB Atlas, Atlas App Services, Charts, Atlas Serverless, Cloud Manager, Atlas Data Lake and Atlas for Government; beta/preview products are out of scope.

Sources

HIPAA Compliance — MongoDB Atlas
https://www.mongodb.com/products/platform/trust/hipaa
Supports: MongoDB has a standard BAA obtained via Sales; covered products list; PHI permitted with signed BAAdated: undated
SOC Compliance — MongoDB Atlas
https://www.mongodb.com/products/platform/trust/soc
Supports: MongoDB has a SOC 2 Type II report for MongoDB Cloud; scope and bi-annual issuancedated: undated
This page is cited public information, not legal or compliance advice. A BAA's availability can depend on your specific plan, region, and contract. Always confirm current terms with MongoDB Atlas before processing protected health information.

Check another vendor

PlanetScaleSigns a BAAActiveCampaignBAA on select plansAcuity SchedulingBAA on select plansAdobe Acrobat SignBAA on select plansAircallSigns a BAAAirtableBAA on select plans

See all HIPAA compliant databases & data platforms →
Browse all 105 vendors by category →