Is Expensify HIPAA compliant?

tonywalls

We have a client in the pharmaceutical industry who is a Covered Entity under HIPAA and they are asking if Expensify if HIPAA compliant?

Rachael Hopkins

Hi @tonywalls Welcome to the Expensify Community!

Sorry for the delay, I needed to run this past the Expensify compliance team. Does the use of Expensify fall within HIPAA given that we don't hold medical records?

We are not compliant with HIPAA right now, and it's not an avenue we're pursuing.

HaroldWong

Hi Just want to revisit if this is planned?

I would like to use it for our clinical drive time, since address is part of PII/PHI we have been holding off on this

Victoria O'leary

Hi @HaroldWong

Thanks for checking in with us. Unfortunately, we're still not HIPAA compliant - it's something that's on our radar but not on our current roadmap. We will keep the community posted if this changes though, so keep an eye out!