All tools / Workspace and projects
C
On some plansIs ClickUp HIPAA compliant?
Checked 6 Nov 2026 from 4 vendor sources
ClickUp says BAAs are issued only to Enterprise customers and are subject to limitations it does not list publicly. So the answer depends on your plan. Check yours below before any patient data goes in.
| Plan or product | BAA |
|---|---|
| Plans other than Enterprise (vendor says BAAs are only issued for Enterprise) | Not covered |
| Enterprise with signed BAA | Covered |
What the BAA leaves out
- ClickUp AI with PHI unless an active BAA is in place and data goes through a zero data retention or otherwise HIPAA compliant workflow or endpoint
- ClickUp AI for medical advice or diagnosis, or as a medical device
- Unspecified BAA limitations and restrictions
How to get the BAA
Contact ClickUp sales to scope a configuration and sign a BAA on Enterprise.
What the vendor says to do
- Upgrade to Enterprise
- Sign the BAA
- Contact sales to scope the configuration
Proof from the vendor
- Compliance and GDPR (ClickUp Help)Enterprise customers can agree to a BAA
- ClickUp FAQsEnterprise plan with signed BAA, contact sales
- ClickUp AI models, privacy, and security FAQBAAs only for Enterprise, subject to limitations
- ClickUp AI Supplementary TermsAI healthcare use needs active BAA, PHI through zero data retention or compliant path
This isn’t legal advice. A BAA is one requirement. Your clinic still has to set the tool up correctly and control who has access. Vendors change their terms, so confirm with the vendor before you sign. PHI means protected health information, which includes patient data.