Badge Criteria
The HIPAA HAVEN PROTECTED Badge
One badge. One standard. Every practice.
The HIPAA HAVEN PROTECTED badge appears on the websites and front doors of practices that run on the HIPAA HAVEN platform. It is a single mark, identical at every service tier, because the protection layer is identical at every service tier.
What the badge means
A practice displaying this badge meets all of the following criteria:
1. An executed Business Associate Agreement.
HIPAA HAVEN has signed a BAA with this practice covering the services we provide. This is contractual and in force, not a marketing statement.
2. Compliant digital infrastructure.
The practice's HIPAA HAVEN website, intake forms, and patient communication tools operate on HIPAA-compliant infrastructure with encryption in transit and at rest.
3. Protected intake.
Patient inquiries submitted through the practice's HIPAA HAVEN forms and communication channels are handled inside the compliant platform, not routed through consumer-grade tools.
4. Active vendor accountability.
The practice uses the HIPAA HAVEN BAA management tool to track Business Associate Agreements across its digital vendors.
5. An active HIPAA HAVEN subscription.
Badge status is continuously tied to an active subscription. If a practice leaves the platform, the badge is retired — the badge reflects current infrastructure, not past status.
What the badge does not mean
We believe a trust mark is only trustworthy if it's honest about its limits:
The badge is issued by HIPAA HAVEN under our program criteria. It is not a certification by HHS, OCR, or any government body — no such government certification exists for HIPAA.
The badge reflects the practice's digital infrastructure and vendor accountability. It does not certify the practice's overall HIPAA compliance program, which remains the responsibility of each practice as a covered entity.
Questions about a badge?
If you have a question about a practice's badge status, contact us at [email protected].
Criteria version 1.0, effective July 1, 2026. HIPAA HAVEN may update these criteria; material changes will be reflected on this page with a revised version number.
©2026 Aquila Stars USA Ops, LLC d/b/a HIPAA HAVEN. HIPAA HAVEN provides HIPAA-compliant infrastructure and services that support your practice's compliance program. HIPAA compliance is the responsibility of each covered entity. The HIPAA HAVEN PROTECTED badge reflects HIPAA HAVEN program criteria and does not constitute certification by HHS, OCR, or any government body.