Kipu
EHR and practice management
EMR plus an admissions CRM. Kipu says its CRM turns website form inquiries into tasks; API access is by key, for Kipu clients and developers working with one.
Scheduling
Calendly and your treatment center website
Booking by link or embed. Calendly says it does not comply with HIPAA, and its terms rule out PHI.
- Read against the vendor's own pages
- No BAA
- Checked October 15, 2026
What it is
Scheduling software that lets people book a time from a link or from a calendar embedded on your website.
How it connects to a website
- Embed
Calendly offers three embeds: inline, popup widget and popup text.
- Link-out
A Calendly scheduling page can also be linked directly.
What KhanWork does with it
- Use Calendly only for bookings that carry no health information, such as referral partner meetings, tours and events.
- Name event types neutrally and remove any custom booking questions about health.
- For families seeking care, point booking to a scheduler covered by a BAA, such as your EHR's own.
Setup, as the vendor documents it
- On your Calendly Scheduling page, open the three-dot menu on the event type (or the landing page) and choose Add to website.
- Pick inline, popup widget or popup text, adjust the display and choose Copy Code.
- Paste the code into the page's HTML and test a booking.
Source: Calendly Help Center, How to add Calendly to your website. Menus and labels change; follow what you see in your account.
What to watch out for
Where patient details can slip out with Calendly, and what the vendor's own documents say to switch on, switch off or ask for.
Calendly's terms rule out PHI
Calendly's customer terms (Section 13(d)) have the customer warrant that Customer Data does not contain protected health information or information subject to HIPAA.
A booking can be health information
A booking on a treatment center's calendar can itself show that someone is seeking care. For anyone booking care, use a scheduler covered by a BAA.
Event names travel
Calendly's Google Analytics help lists the event name as the label on events such as a booked meeting, so your event type names can reach your analytics. Name events neutrally, such as Partner meeting, not after a condition or program.
Booking questions collect data
Custom invitee questions store whatever people type. Remove any that invite health details.
Frequently asked questions
For bookings that carry no health information, such as referral partner meetings, tours and events. Calendly says it does not currently comply with HIPAA, so not for patients or families seeking care.
Calendly says it does not currently comply with HIPAA, and its terms have customers warrant that their data contains no protected health information. We found no BAA offer.
A scheduler covered by a BAA, often the one inside your EHR. We link or embed it the way that vendor documents.
Sources
- Calendly Help Center, Calendly AI Assistant FAQ (opens in a new tab) (checked )
- Calendly, Customer Terms and Conditions (opens in a new tab) (checked )
- Calendly Help Center, How to add Calendly to your website (opens in a new tab) (checked )
- Calendly Help Center, Embed options overview (opens in a new tab) (checked )
- Calendly Help Center, Calendly and Google Analytics (opens in a new tab) (checked )
- Calendly, developer documentation (opens in a new tab) (checked )
Not legal advice. This page reports what the vendor publishes. Nothing here implies a partnership with Calendly. Confirm plans and the BAA in writing with the vendor, and let your compliance lead or counsel decide what counts as PHI in your workflows. For the terms, see BAA, PHI, HIPAA and 42 CFR Part 2 in the glossary.
