There is no official HIPAA certification

No government body issues a HIPAA certification, and the Department of Health and Human Services endorses no training vendor — ours included. Any certificate, from any provider, is that provider's attestation that a person completed its course, nothing more official than that.

What the law actually requires of covered entities and business associates is documented workforce training: train your people on your policies, and keep records proving you did. A certificate of completion is a useful piece of that documentation, and the organization-level export of who trained, when, and with what result is usually the part reviewers care about most.

We keep this page short because the full explanation — what the regulations say, what auditors ask for, and why "certified HIPAA compliant" is a phrase to be wary of — lives in our certification explainer, which is the canonical version. If a vendor's marketing implies government endorsement, that's a signal about the vendor.