HIPAA & BAA · Cloud storage / file sharing
Is Citrix ShareFile HIPAA compliant?
Yes. ShareFile will enter into a BAA and offers HIPAA support on select plans; account owners can enable HIPAA and accept the BAA from within their ShareFile account.
Key facts
- BAA available: Yes — with a signed BAA
- What it takes: ShareFile Premium, VDR, or Industry Advantage plan
- Official source: ShareFile — HIPAA Support (Docs) — https://docs.sharefile.com/en-us/sharefile/configure/hipaa-support.html (verified 2026-06)
How to use Citrix ShareFile in a HIPAA-compliant way
- Subscribe to a ShareFile plan with HIPAA support (Premium, VDR, or Industry Advantage).
- Log into your ShareFile account as account owner.
- Enable HIPAA support and accept the ShareFile BAA.
- Review the executed BAA anytime via the Admin Overview page.
- Configure the account and restrict PHI to the HIPAA-supported environment.
Important caveats
- HIPAA support and the BAA are only available on select plans (Premium, VDR, Industry Advantage), not all tiers.
- PHI may only be used under a valid, mutually executed BAA with Progress/ShareFile.
- A BAA is one part of compliance; correct configuration and use remain your responsibility.
The bottom line
No software is "HIPAA compliant" on its own. HIPAA compliance is a property of your organization, not a tool. Even with a signed BAA, you remain responsible for configuring Citrix ShareFile correctly, limiting access to PHI, training staff, and maintaining your own safeguards. This page is general information, not legal advice; confirm current terms with Citrix ShareFile.
Related tools: Cloud storage & file sharing
BAA availability for tools healthcare teams commonly evaluate alongside Citrix ShareFile.
| Tool | Will the vendor sign a BAA? |
|---|---|
| Is Dropbox HIPAA compliant? | Conditionally — on specific plans |
| Is Box HIPAA compliant? | Conditionally — on specific plans |
| Is Google Drive HIPAA compliant? | Yes — with a signed BAA |
| Is Microsoft OneDrive HIPAA compliant? | Yes — with a signed BAA |
| Is SharePoint HIPAA compliant? | Yes — with a signed BAA |
| Is Egnyte HIPAA compliant? | Yes — with a signed BAA |
| Is Tresorit HIPAA compliant? | Yes — with a signed BAA |
| Is Sync.com HIPAA compliant? | Yes — with a signed BAA |
| Is Google Forms HIPAA compliant? | Conditionally — on specific plans |
Frequently asked questions
Does Citrix ShareFile sign a BAA?
Yes. ShareFile Premium, VDR, or Industry Advantage plan A signed BAA is required before any PHI is involved.
Is Citrix ShareFile HIPAA compliant out of the box?
No software is "HIPAA compliant" by itself. Even when Citrix ShareFile offers a BAA, you are responsible for signing it, configuring the product correctly, restricting access, and maintaining your own administrative, physical, and technical safeguards.
What should I check before using Citrix ShareFile with PHI?
HIPAA support and the BAA are only available on select plans (Premium, VDR, Industry Advantage), not all tiers.