Redact PHI
Prevent healthcare information from reaching non-compliant web trackers and ad platforms
Retain Conversion Data
Continue getting conversion data to identify converted users
Retarget Compliantly
Engage visitors with HIPAA-compliant retargeting journeys across video, native, and display assets
Featured Resource
Navigating the Waters of HIPAA Compliance in Digital Marketing
This on-demand webinar helps you unlock the full potential of your healthcare marketing efforts while protecting patient privacy.
Watch Now →
Keep using the marketing platforms you depend on.
Check out our growing list of available integrations.

HHS recommends Customer Data Platforms for Compliant Ads
We check all the boxes of the latest OCR bulletin.
Flexible Hosting Options
Self-hosted and Hosted Plans Available
Self-Hosted
Own Your Compliance Internally
What’s included
-
Signed BAA
-
Initial Setup
-
PHI Redaction
Hosted
Get HIPAA Compliant Without Adding Extra Burden on Your IT Department
What’s included
-
All Self-Hosted Features, Plus:
-
Server Maintenance
-
Tag Maintenance
-
Ongoing Support
Questions and Answers
What is Destinations?
Destinations prevents protected healthcare information (PHI) from reaching non-compliant third party web trackers.
What is Destinations built with?
Destinations uses Google Tag Manager, Google Cloud Platform, and an optional CDP to redact protected health information. CDPs like Salesforce Data Cloud are used to store identifiable data in a compliant environment, while a Google Tag Manager environment hosted in a BAA-supported Google Cloud Platform runs the redaction algorithms.
Why does Destinations integrate with customer data platforms (CDPs)?
Because CDPs are recommended by the Department of Health and Human Services as a way to run HIPAA-compliant marketing campaigns on non-compliant ad platforms and web trackers.
Why is Destinations compatible with Salesforce Data Cloud?
The short answer is, because Salesforce Data Cloud was named as a leader in the Gartner Magic Quadrant. When compliance is at stake, healthcare companies need flexible, secure products backed by trusted companies. This is why we chose to use Salesforce Data Cloud as a core technology behind Destinations.
What are the advantages of a hosted plan over a self-hosted plan?
Healthcare marketing teams don't usually have the resources to configure hosting, write redaction algorithms, and set up server side containers necessary to ensuring compliance with HIPAA. Additionally, they typically don't have immediate access to legal staff to make complicated compliance decisions. A hosted plan means you can use web trackers or ad platforms without relying on – or waiting for – your IT and legal teams. The healthcare experts at Penrod handle ongoing maintenance to ensure your marketing programs can run seamlessly without downtime.
Get a Demo
Ready to make Google Ads, Meta Ads, and other web trackers HIPAA compliant?
Book a demo and stop worrying about non-compliance fines.
In this meeting, we'll discuss:
- How Penrod Destinations makes your ad platforms HIPAA-compliant
- Your marketing and advertising challenges
- A free privacy audit of your existing website
- Any other questions you have
By submitting this form, you confirm that you have read and agree to the Penrod privacy policy.