Is Calendly HIPAA compliant?
Popular scheduling tool. Calendly's customer terms say customer data must not contain protected health information — no BAA, so it is not for patient bookings.
Calendly does not sign a Business Associate Agreement. Calendly's Customer Terms (section 13(d)) require that customer data not contain protected health information or information subject to HIPAA.
Do not put patient information into it. Options in the same category that offer a BAA, some only on certain plans, include Google Calendar appointment schedules, Acuity Scheduling, Setmore, Square Appointments.
Source: Calendly — Customer Terms and Conditions (effective August 5, 2026) · checked
Choosing a tool is one part of HIPAA. See everything you need to have in place → · Managing several vendors? Free Vendor & BAA Register →
BAA details
Limitations
- Don't use Calendly for patient appointments; it fits non-patient meetings such as vendor or job interviews. source
Against our criteria
| BAA without a sales process | Not verified | Not verified yet |
|---|---|---|
| BAA on entry-level team plans | Not verified | Not verified yet |
Alternatives
- Acuity Scheduling →BAA: conditional
- Google Calendar appointment schedules →BAA: yes
- Setmore →BAA: conditional
- Square Appointments →BAA: conditional