HIPAA & BAA · Scheduling

Is Acuity Scheduling HIPAA compliant?

Yes. Acuity (Squarespace) lets you HIPAA-enable an account and enter a BAA with Squarespace on the Premium or Powerhouse plan.

Key facts

  • BAA available: Yes — with a signed BAA
  • What it takes: Premium or Powerhouse plan (HIPAA-enabled per account)
  • Official source: Acuity Scheduling Help Center: Acuity Scheduling and HIPAA — https://help.acuityscheduling.com/hc/en-us/articles/16689567523597-Acuity-Scheduling-and-HIPAA (verified 2026-06)

How to use Acuity Scheduling in a HIPAA-compliant way

  • Upgrade to the Acuity Premium or Powerhouse plan.
  • HIPAA-enable the specific account and enter the BAA with Squarespace.
  • Access the signed BAA via Scheduling Page > Settings (View/download; optional PDF).
  • Carefully limit the PHI included in email/SMS notifications.
  • Restrict staff access and train on permitted PHI handling.

Important caveats

  • HIPAA features require Premium or Powerhouse; each account must be individually HIPAA-enabled.
  • You control how much PHI is exposed in text/email reminders.
  • The BAA is with Squarespace (Acuity's parent), not a separate Acuity entity.

The bottom line

No software is "HIPAA compliant" on its own. HIPAA compliance is a property of your organization, not a tool. Even with a signed BAA, you remain responsible for configuring Acuity Scheduling correctly, limiting access to PHI, training staff, and maintaining your own safeguards. This page is general information, not legal advice; confirm current terms with Acuity Scheduling.

Related tools: Scheduling

BAA availability for tools healthcare teams commonly evaluate alongside Acuity Scheduling.

ToolWill the vendor sign a BAA?
Is Calendly HIPAA compliant?No — vendor will not sign a BAA
Is Zoho CRM HIPAA compliant?Conditionally — on specific plans
Is Pipedrive HIPAA compliant?No — vendor will not sign a BAA
Is Keap HIPAA compliant?Conditionally — on specific plans
Is ActiveCampaign HIPAA compliant?Conditionally — on specific plans
Is Klaviyo HIPAA compliant?No — vendor will not sign a BAA
Is GoHighLevel (HighLevel) HIPAA compliant?Conditionally — on specific plans
Is Constant Contact HIPAA compliant?Conditionally — on specific plans
Is Freshdesk HIPAA compliant?Conditionally — on specific plans

Frequently asked questions

Does Acuity Scheduling sign a BAA?

Yes. Premium or Powerhouse plan (HIPAA-enabled per account) A signed BAA is required before any PHI is involved.

Is Acuity Scheduling HIPAA compliant out of the box?

No software is "HIPAA compliant" by itself. Even when Acuity Scheduling offers a BAA, you are responsible for signing it, configuring the product correctly, restricting access, and maintaining your own administrative, physical, and technical safeguards.

What should I check before using Acuity Scheduling with PHI?

HIPAA features require Premium or Powerhouse; each account must be individually HIPAA-enabled.