Terms of Service FAQ

March 27, 2026

Compliance with Laws: Disclaimers

These Terms of Service FAQs are for informational purposes only—they are not contractual or binding in nature. These FAQs should not be seen as a substitute for reading and understanding BambooHR’s Terms of Service. Please see section 17.9 of the Terms of Service for additional information.

Is BambooHR compliant with my local laws and regulations (e.g., employment laws)? What help does BambooHR offer in relation to my internal employment practices? (13.1, 13.2, 13.3)

Each party is responsible for fulfilling its obligations under applicable law. BambooHR offers a product and a service to customers all over the world in many jurisdictions and many industries. BambooHR has built its products to assist HR professionals so they can better serve their organizations and does make an effort to consider the legal or regulatory requirements our customers face when building its products. But BambooHR cannot be experts on all of the unique employment laws and regulations for every jurisdiction where our customers are located nor build a product that could incorporate those unique legal requirements. BambooHR is not your HR department or legal counsel for HR matters. It is each customer’s responsibility to have a robust HR and legal function within its organization and to ensure that it uses our services in a way that complies with applicable laws. BambooHR is not responsible for how your employees use the system or for any employment actions you take while using our services.

Is BambooHR HIPAA compliant? Will BambooHR sign a BAA form? (13.6?)

Yes, if you are a covered entity, HIPAA applies to certain BambooHR Services, such as Benefits Administration and ACA reporting. BambooHR would act as your business associate under our Business Associate Agreement for such services. HIPAA obligations should not extend to your employment records, as HIPAA expressly carves out such covered entities employment records from the definition of PHI. Covered entities should only collect and store PHI in relation to services covered under the Business Associate Agreement.