Yes A BAA is available on request on the Balance, Practice and Thrive plans for Jane's practice management platform. The main exclusion is Jane Websites. Verified 2026-10-28; next check 2027-01-28. See all vendor checks in Is it HIPAA compliant? All vendors.
This page reports what Jane publishes. It is not an audit, not legal advice, and not a certification.
Short answer
Jane's Terms of Use say Jane will, on request, enter into its standard BAA with any HIPAA-covered subscriber. No plan restriction is stated. Per the Privacy Compliance section of the Terms, you request the BAA by emailing Jane. The agreement is not attached to the account automatically. Read the BAA definition in the glossary if the term is new to you.
Jane Websites is excluded because Jane states it handles no PHI.
Which plans include a BAA
| Plan | BAA | How it is obtained | Extra cost |
|---|---|---|---|
| Balance | Available on request | Email Jane to request the standard BAA | Not published by the vendor (plan price: CAD $59 per month, first practitioner included) |
| Practice | Available on request | Email Jane to request the standard BAA | Not published by the vendor (plan price: CAD $79 per month) |
| Thrive | Available on request | Email Jane to request the standard BAA | Not published by the vendor (plan price: CAD $99 per month) |
Plan prices come from Jane's pricing page and are context only. Whether the BAA costs extra is not published by the vendor. No plan is listed as excluded from the BAA.
What the BAA covers and what it excludes
Covered
- The Jane practice management platform: scheduling, charting, billing and online booking.
Excluded
- Jane Websites. Jane states it handles no PHI, so no BAA is offered for it.
A clinic that runs both products should keep that boundary clear. Patient details belong in the platform under the BAA. They do not belong on the website product.
Data residency is chosen at signup: Canada, US, UK/EU, or AU/NZ/SG.
Security controls the vendor publishes
| Control | Published status |
|---|---|
| Encryption in transit | Yes |
| Encryption at rest | Yes |
| Audit log | Yes |
| Access controls | Yes |
| SSO | Not published by the vendor |
| Data residency | CA, US, UK/EU, AU/NZ/SG (chosen at signup) |
| SOC 2 | Yes |
| HITRUST | Not published by the vendor |
| ISO 27001 | Not published by the vendor |
How to use Jane App with PHI
The BAA covers Jane's side. The clinic is responsible for the rest. Before the first patient chart goes in:
- Request the BAA by email and get it signed before any PHI enters Jane.
- Choose the data region at signup, since the option is set when the account is created.
- Set staff permissions per person, so a front-desk employee sees only what the role requires.
- Review the access logs on a schedule that your privacy officer sets.
- Keep Jane Websites free of PHI. Do not publish or collect patient details through the site.
- Maintain written staff policies and training, and remove access when someone leaves the practice.
Compliance depends on the signed BAA, your configuration and your organization's policies. A subscription does not provide it. For the surrounding process, see the HIPAA guides.
Alternatives with a BAA
These are other scheduling and practice tools whose BAA status is covered on this site. Each entry shows its verdict and the plan or scope the BAA applies to. The list is not a ranking. Browse more in HIPAA-compliant software by category.
- Acuity Scheduling: conditional; Premium (formerly Powerhouse).
- Google Calendar: conditional.
- SimplePractice: yes; Starter.
- Square: conditional; Square Free.
- Vagaro: conditional; medical spa and wellness customers, plan not specified.
Sources
- Terms of Use | Jane — Terms, checked 2026-10-28. "we will, upon request, enter into our standard Business Associate Agreement […] to request a copy of our standard BAA or IMA"
- Is Jane HIPAA compliant? — Help article, checked 2026-10-28. "your data is encrypted with 128 bit encryption […] stored with 256 bit encryption […] All access is logged so that you can review the logs as necessary. […] Jane allows you to control the permissions for each staff member."
- Security FAQ – Jane App — Help article, checked 2026-10-28. "Jane Data is stored on secure SOC 2 audited servers. […] the location depends on the location you choose for your Jane account when you sign up."
- Jane pricing — Pricing page, checked 2026-10-28. "Balance: CAD $59 / month; Practice: CAD $79 / month; Thrive: CAD $99 / month"
Changes
No changes recorded since first verification on 2026-10-28. See recent changes in vendor HIPAA status.
FAQ
Does Jane App sign a BAA?
Yes, on request. Per the Terms of Use, Jane will enter into its standard BAA with a HIPAA-covered subscriber. Request it by email, as described in the Privacy Compliance section.
Which Jane plans can get a BAA?
Balance, Practice and Thrive. No plan restriction is stated, and no plan is listed as excluded.
Is Jane Websites covered by the BAA?
No. Jane states that Jane Websites handles no PHI, so no BAA is offered for it.
Where is Jane App data stored?
In the region you choose at signup: Canada, US, UK/EU, or AU/NZ/SG. According to the Security FAQ, the servers are SOC 2 audited.