Is Square Appointments HIPAA compliant?
Booking and payments for appointment-based businesses. Square's HIPAA BAA covers Square Appointments where Square acts as your business associate; Square's buyer-facing services are excluded.
Square Appointments signs a Business Associate Agreement only under specific conditions. Square's HIPAA Business Associate Agreement applies "including when you use Square Appointments, Invoices", limited to configurations where Square acts as a business associate.
A BAA alone does not make its use HIPAA compliant: you remain responsible for configuring it securely and covering it in your risk analysis.
Source: Square — HIPAA Business Associate Agreement · checked
Choosing a tool is one part of HIPAA. See everything you need to have in place → · Managing several vendors? Free Vendor & BAA Register →
BAA details
| Signs a BAA | Conditional | Square — HIPAA Business Associate Agreement |
|---|
Limitations
- Square Buyer Services — including Square Go, Square Profile and Square Pay — are excluded from the BAA, so coverage doesn't extend to the whole booking path a patient may use. Check every part of the flow you rely on before patients book. source
Against our criteria
| BAA without a sales process | Not verified — How the BAA is accepted isn't confirmed in the sources checked. | Square — HIPAA Business Associate Agreement |
|---|---|---|
| BAA on entry-level team plans | Not verified | Not verified yet |
Alternatives
- Acuity Scheduling →BAA: conditional
- Calendly →BAA: no
- Google Calendar appointment schedules →BAA: yes
- Setmore →BAA: conditional