Neon extends HIPAA compliance to its backend services
Managed Better Auth, Data API, Functions, Object Storage, AI Gateway and Realtime can now handle protected health data, and Better Auth adds Apple and Microsoft sign-in.
Neon extended its HIPAA compliance cover on 30 October from just the core Postgres database to the rest of its backend services: Managed Better Auth, Data API, Functions, Object Storage, AI Gateway and Realtime. Until now, a team building a health-tech app on Neon could keep protected health information in the database under a business associate agreement, but had to run authentication, file storage or background jobs somewhere else to stay in scope.
The same release adds Apple and Microsoft Entra ID as sign-in providers for Managed Better Auth, alongside the existing Google, GitHub and Vercel options. The Better Auth SDK is also renamed, so existing imports need updating:
// was @neondatabase/auth
import { createAuthClient } from '@neon/auth'The Data API client moves the same way, from @neondatabase/postgrest-js to @neon/postgrest-js.
Why it matters: this closes a real gap for anyone building regulated healthcare software on Neon, who can now keep the whole backend, not just the database, on one compliant platform instead of stitching in a separate auth or storage provider. The package rename is a breaking change if you’re already on Better Auth, so check your imports before upgrading.