Vendor Privacy Scorecard · ClickUp
ClickUp Brain: is it safe for client information?
AI answers, writing and summaries across ClickUp tasks and docs.
Bottom line
Good fit for project work. Confirm the BAA before storing health information.
Does it train on your data? By plan
Paid plans with Brain: No training
ClickUp states customer data is not used to train models and AI providers keep no data.
What an auditor will ask
- Trains AI on your data? No
- Not used for training.
- Retention you can control? Depends on plan
- Follows your workspace settings.
- Signs a HIPAA BAA? Depends on plan
- ClickUp offers a BAA on Enterprise. Confirm in writing.
- Staff may read your content? No
- Not reviewed for training.
Security certifications
- SOC 2 Type II
- ISO/IEC 27001
- ISO/IEC 42001
Set it up the safe way
- Limit what Brain can search with workspace permissions.
- Sign the BAA before any health information goes in.
ClickUp trust centerBusiness privacy terms
Summarized from ClickUp's published terms, last checked 10/1/2026. Vendors change terms. Confirm every point against the agreement you actually signed. This is not legal advice.
Using ClickUp Brain at work? An unvetted tool can cost you your license.
When an employee pastes client information or confidential files into ClickUp Brain without the correct safeguards, licensing boards and regulatory bodies hold you responsible. AI Governance Rule Watch™ documents your approved tool roster, vendor reviews, and staff guidelines in permanent diligence records ready for any audit.
Founding member rate. Cancel anytime. Plus applicable taxes. Renews until canceled. Not legal advice and not a compliance certification.