For those who require HIPPA compliance, what steps do you take to ensure security? We follow the obvious steps: Never include production data in any collections. Store any sensitive information in environments. Only use the current value in our environments. (as current values dont get synced to …

I would add to this: don’t save responses as examples, since they will be synced: https://learning.postman.com/docs/postman/collections/examples/

If you are hitting a test environment why cant you save responses? This is to assist people learning the api… what does this have to do with hippa…?

This is a great list. How about for the times if we run requests against production data, does Postman keep that information at its servers? I went to their information page on what data is being collected (below), and it is not clear if the requests or the response contents are collected and store…

HIPPA compliance

Help Hub

KrisBr4 (Kris) March 11, 2020, 4:32pm 5

Postman gets used to test in production. If you never use it in Prod it should be fine to save responses.

Topic		Replies	Views
Postman Cloud Collections and Security Help Hub collections , security , scratchpad	6	7072	August 12, 2025
Does Postman automatically share/store collections/APIs server-side? Help Hub shared	4	388	January 15, 2025
Time for another Goodbye Scratchpad Help Hub security , data , scratchpad	3	878	September 27, 2023
Does Postman store request bodies and responses? Help Hub security , request	2	1281	November 3, 2023
Postman Pro environment syncing Help Hub collections	13	14679	June 11, 2024

HIPPA compliance

Related topics