All tools / Workspace and projects
Is Trello HIPAA compliant?
Checked 6 Nov 2026 from 4 vendor sources
Atlassian’s BAA bars PHI in cloud products that are not HIPAA-qualified, its HIPAA pages do not list Trello, and a Trello Team reply says HIPAA compliance is not on the roadmap. The vendor’s position isn’t clear enough to rely on. Treat it as unsafe for patient data until the vendor confirms in writing.
| Plan or product | BAA |
|---|---|
| All Trello plans (Trello is not on the listed apps) | Not covered |
What the BAA leaves out
- Trello is outside the Atlassian HIPAA app list
What we couldn’t confirm
Trello’s direct statement is an undated community reply, not a formal product page. Ask Atlassian for a clear answer in writing.
Proof from the vendor
- Understand HIPAA compliance for Atlassian appsIn-scope apps are Jira, Jira Service Management, Jira Product Discovery and Confluence
- HIPAA (Atlassian Trust)Listed products do not include Trello
- Atlassian Business Associate AgreementCustomers must not provide PHI to non-qualified cloud products
- Trello & HIPAA Compliance (Atlassian Community)Reply signed Trello Team says Trello does not claim HIPAA compliance and it is not on the roadmap
This isn’t legal advice. A BAA is one requirement. Your clinic still has to set the tool up correctly and control who has access. Vendors change their terms, so confirm with the vendor before you sign. PHI means protected health information, which includes patient data.