The purpose of a virtual private network (VPN) is to encrypt data shared between devices. But there is no mention of NordVPN’s ability to enable HIPAA compliance or of the company’s willingness to sign a Business Associate Agreement (BAA) on the NordVPN website.
NordLayer — NordVPN’s business VPN solution — claims to enable HIPAA compliance with appropriate measures for securing access to Protected Health Information (PHI).
The NordLayer Help Center provides additional information about HIPAA and NordLayer. Plans are discussed on the website, but there is no specific mention of which ones enable HIPAA compliance.