Is Wrike HIPAA compliant?

Project management · vendor site ↗

Signs a BAAPHI with conditionsSOC 2 Type II
Will Wrike sign a HIPAA BAA?
Yes — Wrike will sign a HIPAA Business Associate Agreement (BAA).
Wrike's published terms require customers who upload PHI to 'first separately enter into a Wrike Business Associate / Subcontractor Agreement (BAA) with Wrike,' and PHI may be uploaded 'only into those portions of the Service designated by Wrike as suitable for PHI.' Wrike lists HIPAA among its compliance attestations.
PHI eligibility
PHI is allowed only after signing Wrike's BAA and only in the service areas Wrike designates as PHI-suitable; confirm which components and plan are PHI-eligible with Wrike before storing PHI.
SOC 2
SOC 2 Type II
Trust center
Sub-processors
Notes
The terms do not enumerate which service portions are PHI-suitable, and Wrike Lock (customer-managed keys) is an Enterprise / Pinnacle add-on; verify the eligible scope with Wrike.
Last verified 2026-05-31confidence: high· Vendor terms change — confirm directly with Wrike before storing PHI.

Get notified when this changes

We track Wrike's BAA and HIPAA status. Leave your email and we'll send one note if the verdict on this page changes.

One email per change. No newsletter, no selling your address.

How to request and sign a BAA with Wrike

Yes — Wrike will sign a HIPAA Business Associate Agreement (BAA).

Request routeSelf-serve — enable it in your account
  1. 1
    Confirm your account is covered
    Wrike's published terms require customers who upload PHI to 'first separately enter into a Wrike Business Associate / Subcontractor Agreement (BAA) with Wrike,' and PHI may be uploaded 'only into those portions of the Service designated by Wrike as suitable for PHI.' Wrike lists HIPAA among its compliance attestations.
  2. 2
    Request the Business Associate Agreement
    Wrike lets you obtain the BAA without a sales call. Follow the path named in the plan requirement above — typically an in-product toggle or a billing / compliance settings page — then request and accept the agreement from your own account.
  3. 3
    Confirm what PHI is allowed before you store any
    PHI is allowed only after signing Wrike's BAA and only in the service areas Wrike designates as PHI-suitable; confirm which components and plan are PHI-eligible with Wrike before storing PHI. Match your configuration to this scope before putting protected health information into Wrike.
Last verified 2026-05-31 · Plan tiers and BAA terms change often — confirm the current process directly with Wrike before you rely on it. This is cited public information, not legal advice.

Frequently asked questions

Does Wrike sign a HIPAA Business Associate Agreement (BAA)?
Yes — Wrike will sign a HIPAA Business Associate Agreement (BAA). Wrike's published terms require customers who upload PHI to 'first separately enter into a Wrike Business Associate / Subcontractor Agreement (BAA) with Wrike,' and PHI may be uploaded 'only into those portions of the Service designated by Wrike as suitable for PHI.' Wrike lists HIPAA among its compliance attestations.
Is Wrike HIPAA compliant?
Wrike can be used in a HIPAA-compliant way: it signs a Business Associate Agreement (BAA), which HIPAA requires before you process PHI with a vendor. PHI is allowed only after signing Wrike's BAA and only in the service areas Wrike designates as PHI-suitable; confirm which components and plan are PHI-eligible with Wrike before storing PHI.
Can you store PHI (protected health information) in Wrike?
PHI is allowed only after signing Wrike's BAA and only in the service areas Wrike designates as PHI-suitable; confirm which components and plan are PHI-eligible with Wrike before storing PHI.
Is Wrike SOC 2 certified?
Wrike reports a SOC 2 Type II attestation according to its public security documentation.
How do I request a HIPAA BAA from Wrike?
Wrike lets you obtain the BAA without a sales call. Follow the path named in the plan requirement above — typically an in-product toggle or a billing / compliance settings page — then request and accept the agreement from your own account. Confirm current terms directly with Wrike before storing PHI.
What plan do I need to sign a BAA with Wrike?
Wrike's published terms require customers who upload PHI to 'first separately enter into a Wrike Business Associate / Subcontractor Agreement (BAA) with Wrike,' and PHI may be uploaded 'only into those portions of the Service designated by Wrike as suitable for PHI.' Wrike lists HIPAA among its compliance attestations.

Sources

https://www.wrike.com/security/terms/
Supports: Requires a separate Wrike BAA before uploading PHI; PHI only into Wrike-designated suitable portionsdated: undated
https://www.wrike.com/security/
Supports: Lists HIPAA among security / compliance attestationsdated: undated
This page is cited public information, not legal or compliance advice. A BAA's availability can depend on your specific plan, region, and contract. Always confirm current terms with Wrike before processing protected health information.

Check another vendor