Is Calendly HIPAA Compliant for Therapists?
Quick Answer
No — Calendly does not sign Business Associate Agreements on any plan, including its highest paid tier. Calendly's own support team confirms this directly and advises against collecting protected health information through its booking flow. This is not a plan-tier limitation like some other tools on this list — no amount of upgrading unlocks HIPAA compliance for Calendly.
Written & fact-checked by the Therapy HIPAA Hub editorial team — see our editorial standards.
Verified August 2026 against Calendly community support confirmation
BAA Available?
No
On Which Plan
None — not offered on any tier
Appointment date, time, and a generic client name are lower-risk than clinical detail, but Calendly's intake question fields should never be used to collect reason-for-visit, symptoms, or anything that could be read as mental health treatment information — there is no configuration that makes this safe.
What to Use Instead for Client Work
SimplePractice's client portal includes HIPAA-compliant self-scheduling with the BAA already covering the booking flow — clients can book their own appointments without any of Calendly's PHI exposure risk.
Affiliate link — we may earn a commission at no extra cost to you.
No Tier Solves This
Unlike Slack, Notion, or Otter.ai, where an expensive top tier does eventually offer a BAA, Calendly has no compliant tier at any price point. Its own support channels confirm this plainly rather than pointing to an upgrade path — this is a permanent limitation of the product, not a budget question.
Where the Real Risk Hides
The scheduling itself (a time slot on a calendar) is relatively low-risk, but Calendly's customizable intake questions are where practices get into trouble — asking 'what would you like to discuss?' or 'briefly describe your reason for visit' turns a simple booking tool into a PHI collection point with zero HIPAA coverage behind it.
Trusted by 225,000+ Therapists
50% Off Your First 4 Months of SimplePractice
SimplePractice is the #1 HIPAA-compliant practice management platform for therapists. Includes a signed BAA, encrypted messaging, telehealth, and full insurance billing.
Limited-time summer offer · No credit card required for trial
Need HIPAA-compliant email only? See Hushmail for Healthcare →
FAQ — Calendly and HIPAA
Is there a Calendly plan that includes a BAA?
No. Calendly does not offer a Business Associate Agreement on any plan, including Enterprise. This is confirmed directly by Calendly's own support team.
Can I still use Calendly if I don't ask clinical questions?
The booking time and a client's name carry lower risk than clinical content, but without a BAA, Calendly is still not a compliant system of record for anything tied to a specific client's mental health treatment. Most compliance-conscious practices avoid it entirely for client scheduling.
What should I use instead of Calendly for client booking?
A platform with a signed BAA and built-in scheduling, like SimplePractice, covers the entire booking flow under HIPAA protection — including any intake questions asked during scheduling.