Does ClickUp Brain sign a BAA?

Only on some plans or setups

ClickUp says it supports HIPAA for Enterprise customers by signing a BAA. Its AI terms allow ClickUp AI in healthcare work only under an active BAA, once ClickUp confirms the account is set up for it, with PHI going through zero-data-retention or HIPAA-compliant workflows.

Based on 5 sources, all from ClickUp unless marked.

Not fully covered by the BAA: ClickUp Brain and Super Agents.

Business associate
ClickUp
Tool
ClickUp Brain
Plans with a BAA
Enterprise
Checked
Some plans only
ClickUp signs only for the plans listed.

By plan

PlanBAAHow to get itConditions
Free / Unlimited / BusinessNo BAANot offeredClickUp's own materials say HIPAA support is limited to the Enterprise plan.[1],[2]
EnterpriseSigns a BAANot statedClickUp says it can support HIPAA for Enterprise customers by agreeing to a BAA. Enterprise is sold through sales, but no page describes how the BAA itself is requested or signed.[2],[3],[1]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what ClickUp says about each one.

AI featureUnder the BAADetails
ClickUp Brain and Super AgentsEnterprisePartly coveredHealthcare use of ClickUp AI needs an active BAA and ClickUp's confirmation that the account is set up for it. PHI may only go through zero-data-retention or HIPAA-compliant workflows. ClickUp says it has BAAs and zero-retention agreements with every LLM provider it uses (OpenAI, Anthropic, Google). The terms also bar use for diagnosis or treatment plans, so coverage is conditional rather than blanket.[2],[4]
Brain MAX Talk to TextEnterpriseNot statedOnly a ClickUp marketing blog suggests using it in a HIPAA-enabled environment under a BAA. No help or legal page confirms this.[1]

Workspace and collaboration AI that offer a BAA

All BAA-ready alternatives to ClickUp Brain

Sources

  1. 10 Best HIPAA-Compliant AI Tools for Secure Healthcare in 2026ClickUp, Documentation. Checked Oct 11, 2026.
  2. ClickUp AI models, privacy, and security FAQClickUp, Help center. Checked Oct 11, 2026.
  3. ClickUp for Healthcare TeamsClickUp, Documentation. Checked Oct 11, 2026.
  4. ClickUp AI Additional TermsClickUp, Legal terms. Checked Oct 11, 2026.
  5. ClickUp SecurityClickUp, Trust center. Checked Oct 11, 2026.

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.