For those who require HIPAA compliance, what steps do you take to ensure security? We follow the obvious steps: Never include production data in any collections. Store any sensitive information in environments. Only use the current value in our environments. (as current values don’t get synced to…

I would add to this: don’t save responses as examples, since they will be synced: https://learning.postman.com/docs/postman/collections/examples/

If you are hitting a test environment why cant you save responses? This is to assist people learning the api… what does this have to do with hippa…?

Postman gets used to test in production. If you never use it in Prod it should be fine to save responses.

This is a great list. How about for the times if we run requests against production data, does Postman keep that information at its servers? I went to their information page on what data is being collected (below), and it is not clear if the requests or the response contents are collected and store…

HIPAA compliance

Help Hub

danny-dainton (Danny Dainton) May 6, 2026, 8:04pm 7

Dropping back in here to share the latest information about our Health Insurance Portability and Accountability Act (HIPAA) Compliance:

https://blog.postman.com/postman-is-hipaa-compliant/

Topic		Replies	Views
Postman Cloud Collections and Security Help Hub collections , security , scratchpad	5	7236	August 12, 2025
Does postman log secrets and environment variables data to Postman Cloud? Help Hub variables	1	530	May 22, 2025
Time for another Goodbye Scratchpad Help Hub security , data , scratchpad	2	900	September 22, 2023
Does Postman automatically share/store collections/APIs server-side? Help Hub shared	3	503	December 16, 2024
Forced to store environments on postman servers? Help Hub environments , collections , security , offline-mode , scratchpad	43	17233	August 19, 2025

HIPAA compliance

Related topics