HIPAA and BAA support is available as an add-on to Bubble's Dedicated Enterprise plan. With it, Bubble signs a BAA with you and runs your app on dedicated, HIPAA-ready infrastructure. Your app's full compliance also depends on how you configure it, and any third-party service that receives PHI from your app needs its own signed BAA with you.
Pricing is scoped to your use case. To get started, talk to our sales team. For more detail, see the HIPAA article.
We always recommend that you consult a qualified legal professional for advice regarding specific regulatory compliance obligations relevant to your circumstances.