# Which online booking tools are HIPAA compliant?

Of 17 tracked booking & scheduling tools, 7 publicly state HIPAA support and 5 also offer a signed BAA (Acuity Scheduling, Setmore, vcita, GReminders, Vagaro). For a medical, dental or therapy front desk collecting patient details at booking, the signed BAA is the document that matters — the rest say nothing about HIPAA publicly, which we record as "not published," not as "no." Some gate the BAA behind a higher tier (e.g. Acuity Premium).

## The data behind this answer

| Vendor | Compliance posture | Source | Verified |
| --- | --- | --- | --- |
| Acuity Scheduling | HIPAA + signed BAA (BAA available) | acuityscheduling.com | 2026-06-27 |
| Fresha | HIPAA stated (BAA not published) | fresha.com |  |
| GlossGenius | HIPAA stated (BAA not published) | glossgenius.com | 2026-06-27 |
| GReminders | HIPAA + signed BAA (BAA available) | greminders.com | 2026-06-12 |
| Setmore | HIPAA + signed BAA (BAA available) | setmore.com | 2026-06-12 |
| Vagaro | HIPAA + signed BAA (BAA available) | vagaro.com |  |
| vcita | HIPAA + signed BAA (BAA available) | vcita.com | 2026-06-27 |

## Related questions

### Do booking tools sign a BAA?

5 of the tracked tools publicly offer a signed Business Associate Agreement: Acuity Scheduling, Setmore, vcita, GReminders, Vagaro. A BAA is required to handle protected health information at booking under HIPAA, so for clinics and dental offices it is the figure that matters most. Some, like Acuity, gate the BAA to a specific paid tier.

### Is HIPAA the same as having a BAA?

No. A vendor can market HIPAA-compliant scheduling without signing a BAA. Only a signed BAA legally permits processing protected health information on your behalf, so confirm the BAA, not just the claim — and check which tier it requires.

### Why does HIPAA matter for appointment booking?

Even the reason-for-visit field, an intake form or an SMS reminder that names a service can expose protected health information. Without a BAA, routing that through a booking tool can breach HIPAA, so verify compliance before collecting patient data.

Canonical: https://frontdeskreview.com/online-booking/answers/hipaa-compliant-online-booking-software/
Cite: Per The Front Desk Review, "HIPAA booking" — https://frontdeskreview.com/online-booking/answers/hipaa-compliant-online-booking-software/
License: CC BY 4.0. Price history: https://frontdeskreview.com/data/price-history.jsonl