TLDR
Yes, Jira Software is HIPAA compliant on Standard ($7.16/user/mo) and Premium ($17.17/user/mo) tiers — both sign a BAA, which is notable for non-enterprise pricing. However, Jira Work Management and Trello are explicitly excluded from the BAA. Atlassian Intelligence (AI features) must be disabled in any HIPAA-eligible account. For clinical admin workflows, the bigger problem is that Jira is built for software development teams, not medical practices.
The Short Answer
Jira Software Standard ($7.16/user/month) and Jira Software Premium ($17.17/user/month) are both HIPAA-eligible. Atlassian signs a BAA at these tiers, which is unusual. Most SaaS project management vendors gate HIPAA compliance behind enterprise contracts with custom pricing.
The qualification matters more than the headline: Jira Work Management and Trello are explicitly excluded from that BAA.
What “HIPAA-Eligible” Covers at Atlassian
Atlassian’s BAA covers Jira Software on Standard and Premium tiers only. The following Atlassian products are outside BAA scope:
Jira Work Management — Atlassian’s business-operations version of Jira, designed for non-technical teams handling marketing, HR, operations, and finance workflows. This is the Atlassian product most closely aligned with how a clinic might use task management. It is not covered.
Trello — Atlassian’s visual kanban tool, widely used for simple task tracking in small businesses. Explicitly excluded from the BAA. Any practice using Trello boards for patient referral tracking, follow-up lists, or care coordination tasks has no HIPAA coverage.
Atlassian Intelligence Must Be Disabled
Atlassian has integrated AI features, branded as Atlassian Intelligence, into Jira, Confluence, and related products. This assistant provides issue summarization, natural language search, automation suggestions, and writing assistance.
In HIPAA-eligible accounts, Atlassian Intelligence must be disabled.
Atlassian has not published a timeline for extending BAA coverage to Atlassian Intelligence. Any Jira account that uses AI features and handles PHI does so outside the BAA.
The Tool-Workflow Mismatch
Even with a valid BAA in place, Jira Software presents a design mismatch for medical practices.
Jira is a software development tool. Its core concepts are sprints (time-boxed development iterations), story points (effort estimation units), epics (large feature groupings), and velocity (development throughput metrics).
A practice administrator managing referral follow-ups, insurance authorization tasks, compliance training checklists, and care coordination handoffs is working entirely outside Jira’s intended model.
Practices can configure Jira to approximate clinical workflows using custom issue types and fields. This requires technical setup and ongoing maintenance that most small clinics don’t have the staff to manage.
The Pricing Context
Jira Standard at $7.16/user/month is among the cheaper tools with a BAA. A 10-person practice pays $71.60/month.
That’s not expensive. The question is whether a developer tool that requires custom configuration for clinical workflows is worth the cost compared to a platform built for those workflows.
<DataTableBlock caption=“Jira HIPAA eligibility by tier and product” headers={[“Product / Tier”, “BAA Available”, “Notes”]} rows={[ [“Jira Software Free”, “No”, “No BAA at free tier”], [“Jira Software Standard ($7.16/user/mo)”, “Yes”, “BAA available; AI must be disabled”], [“Jira Software Premium ($17.17/user/mo)”, “Yes”, “BAA available; AI must be disabled”], [“Jira Software Enterprise (50+ users)”, “Yes (custom)”, “Custom pricing; AI must be disabled”], [“Jira Work Management”, “No”, “Explicitly excluded from BAA”], [“Trello (all tiers)”, “No”, “Explicitly excluded from BAA”], ]} />
Who Should Use Jira for HIPAA-Eligible Work
Jira Software makes sense for health technology companies and hospital IT departments running software development operations that touch PHI: engineering teams building EHR integrations, patient-facing apps, or technical infrastructure for clinical systems.
For clinical task management, the workflows a practice administrator or office manager actually handles, Jira’s developer design is friction that doesn’t resolve with more configuration time.
Alternatives to Jira for Clinical Task Management
PHIGuard starts at $20/month flat for up to 10 staff, BAA included at every tier, with clinical workflows built in. Dock Health starts at $15/user/month with full HIPAA compliance at all tiers. Both handle the workflows Jira wasn’t designed for.
- Business Associate Agreement (BAA)
- A contract required by HIPAA between a covered entity (a medical practice) and any vendor that handles protected health information on its behalf. Without a BAA, using any software for PHI-related tasks is a HIPAA violation, regardless of the vendor's security practices.
DEFINITION
- Jira Work Management
- An Atlassian product positioned for business operations and non-technical teams. Despite being part of the Atlassian suite, Jira Work Management is explicitly excluded from Atlassian's HIPAA BAA, making it unsuitable for any PHI-related workflows.
DEFINITION
- Atlassian Intelligence
- AI assistant features built into Jira, Confluence, and other Atlassian products. These features must be disabled in HIPAA-eligible Atlassian accounts because Atlassian has not extended its BAA to cover AI-processed data.
DEFINITION
Q&A
Is Jira HIPAA compliant?
Jira Software Standard ($7.16/user/mo) and Premium ($17.17/user/mo) are HIPAA-eligible — both tiers sign a BAA. However, Jira Work Management and Trello are explicitly excluded from the BAA. Atlassian Intelligence must be disabled. Only Jira Software (not Jira Work Management or Trello) qualifies for PHI-related use.
Q&A
What Jira products are excluded from the HIPAA BAA?
Atlassian explicitly excludes Jira Work Management and Trello from its BAA coverage. These exclusions apply even if your organization has an active Jira Standard or Premium BAA. Any workflows using Jira Work Management or Trello for patient-related tasks are not covered.
Q&A
Does disabling Atlassian Intelligence affect Jira functionality?
Yes. Atlassian Intelligence provides AI-assisted issue summarization, automation suggestions, and natural language search. Disabling it in HIPAA-eligible accounts removes these capabilities. Practices that want AI-assisted task management will not have it available in a compliant Jira configuration.
Want to learn more?
Frequently asked