HIPAA GUIDES
Is Squarespace HIPAA Compliant?
Short Answer
Not for your website or its forms. Squarespace says Acuity Scheduling is the only Squarespace feature designed for HIPAA, and only on the Powerhouse or Premium plans after a BAA is in place for that account. Its other features cannot be used as part of a HIPAA-compliant setup.
What Squarespace Says
Squarespace publishes a help article called Squarespace and HIPAA. It describes Acuity Scheduling as the only Squarespace feature currently designed to offer services consistent with HIPAA obligations, and says other features cannot be used as part of a HIPAA-compliant solution.
Squarespace's Terms of Service, effective March 27, 2025, say you may not use the services to handle protected health information unless your account is designated as HIPAA-enabled and you have entered into a separate business associate agreement with Squarespace.
What You Can and Cannot Do
| Task | On Squarespace |
|---|---|
| A public practice website with no patient data | Fine |
| Contact or intake forms that collect health details | Not covered |
| Scheduling through Acuity on Powerhouse or Premium with a BAA | Can be HIPAA-enabled |
| Email campaigns to a patient list | Not covered |
| Member areas that hold patient information | Not covered |
If You Use Acuity for Scheduling
- Each Acuity account needs its own BAA
- HIPAA features are available on the Powerhouse or Premium plans
- Default email and text notifications may include patient details, so they need to be adjusted
- Many third-party integrations do not support HIPAA and should be reviewed or disabled
- Squarespace notes that enabling HIPAA features alone is not enough to make you compliant
What Practices Usually Do
Many practices keep a Squarespace site as a public brochure and link out to separate HIPAA-ready tools for intake, scheduling and messaging. That works, but it means several vendors, several BAAs and a patient journey split across systems.
The alternative is a platform where the website, forms, booking and follow-up sit under one BAA. That is what the Aspire Builder Pro HIPAA plan is built for. See the HIPAA website builder and the HIPAA form builder.
Frequently Asked Questions
This article is general information, not legal advice. Vendor plans and policies change, so confirm details with each vendor before you rely on them. Last reviewed October 10, 2026.
