Protections for HIPAA-enabled accounts include email notification privacy, a shortened browser session timeout, and limited access for uploading intake forms. Also, customers can disable third-party integrations that don’t support HIPAA.
Squarespace's Powerhouse Player or Enterprise plan may be used to access HIPAA-compliant features for your Scheduling account. Each Scheduling account must be HIPAA enabled before using the service for PHI.
Covered entities should obtain a signed business associate agreement (BAA) from Squarespace.