Does Calendly sign a BAA?
No BAA available
Calendly's own help center says it does not currently comply with HIPAA or similar health regulations. Its security pages say nothing about a BAA, so no BAA appears to be offered.
- Business associate
- Calendly
- Tool
- Calendly
- Plans with a BAA
- None
- Checked
No BAA
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| All plans (Free, Standard, Teams, Enterprise) | No BAA | Not offered | The Notetaker FAQ says Calendly does not currently comply with HIPAA, GLBA or similar health and financial rules. The security and compliance pages list SOC 2, SOC 3, ISO 27001, CSA STAR and PCI, with no HIPAA or BAA. We found no page that offers a BAA on any plan.[1],[2],[3] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Calendly says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Calendly Notetaker (AI meeting recaps) | Excluded | The Notetaker FAQ, answering whether HIPAA-regulated organizations can use Notetaker, says Calendly does not currently comply with HIPAA.[1] |
Workspace and collaboration AI that offer a BAA
- Adobe Acrobat AI AssistantBAA on: Acrobat Studio for enterprise: Analyzer in Acrobat, Acrobat Studio for enterprise: Knowledge Base in AcrobatSome plans only
- Airtable AIBAA on: Enterprise ScaleSome plans only
- Asana AIBAA on: AsanaGov, Enterprise+Some plans only
- Atlassian Rovo / Atlassian Intelligence (Confluence, Jira)BAA on: Enterprise, Standard / Premium (Jira, Jira Service Management, Jira Product Discovery, Confluence)Some plans only
- Box AIBAA on: Enterprise / Enterprise Plus / Enterprise AdvancedSome plans only
- ClickUp BrainBAA on: EnterpriseSome plans only
All BAA-ready alternatives to Calendly
Sources
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.