Is Doxy.me HIPAA Compliant for Therapists?
Quick Answer
Probably, but verify before relying on it. Doxy.me's Help Center states it offers a free BAA to all users, while its own pricing page lists 'BAA included' as a named feature specifically under the paid Premium plan — these two Doxy.me-owned pages do not fully agree with each other. Doxy.me is built specifically for telehealth and is generally considered HIPAA-native, but given the direct inconsistency, confirm your exact plan includes a fully executed BAA in writing before your first client session.
Written & fact-checked by the Therapy HIPAA Hub editorial team — see our editorial standards.
Verified August 2026 against Doxy.me's HIPAA compliance help article
BAA Available?
Yes
On Which Plan
Stated as available broadly, but sources conflict on Free vs. Premium — confirm directly with Doxy.me
Because Doxy.me's own Help Center and pricing page do not fully agree on whether the free plan includes a BAA, the safest path is to email Doxy.me support, ask for written confirmation that a BAA is fully executed on your specific plan, and keep that confirmation on file — not just marketing page language — before using it for any client session.
What to Use Instead for Client Work
If you would rather not chase down a written BAA confirmation yourself, SimplePractice's built-in telehealth has its BAA coverage stated unambiguously across every plan, with no free-vs-paid ambiguity to resolve.
Affiliate link — we may earn a commission at no extra cost to you.
Why Doxy.me Is Usually Recommended for Telehealth
Doxy.me was built specifically for healthcare video visits, not adapted from a general-purpose conferencing tool — this is why it's frequently recommended as a free or low-cost HIPAA-compliant option in therapist communities. That reputation is generally well-earned, but 'generally well-earned' is not the same as a written guarantee for your specific account.
The Conflict Worth Resolving Before You Rely On It
Doxy.me's own Help Center describes a free BAA available to all users, but its pricing page lists BAA inclusion specifically as a Premium-tier feature. Since these are both official Doxy.me sources and they don't fully align, treat this as an open question rather than a settled fact — a quick support email asking for written BAA confirmation resolves it definitively and costs you nothing.
Trusted by 225,000+ Therapists
50% Off Your First 4 Months of SimplePractice
SimplePractice is the #1 HIPAA-compliant practice management platform for therapists. Includes a signed BAA, encrypted messaging, telehealth, and full insurance billing.
Limited-time summer offer · No credit card required for trial
Need HIPAA-compliant email only? See Hushmail for Healthcare →
FAQ — Doxy.me and HIPAA
Does Doxy.me's free plan include a Business Associate Agreement?
Doxy.me's Help Center says yes, but its pricing page lists BAA inclusion under the paid Premium plan specifically — these sources conflict. Confirm directly with Doxy.me support in writing before relying on the free plan for client sessions.
Is Doxy.me a good HIPAA-compliant telehealth option overall?
Yes, generally — it was purpose-built for healthcare video and is widely used by therapists specifically because of its compliance focus. The main caution is confirming which plan tier actually includes your BAA, since Doxy.me's own pages currently disagree on this detail.
What should I ask Doxy.me support to confirm before my first session?
Ask for written confirmation that a Business Associate Agreement is fully executed on your specific account and plan tier — not just a general statement that Doxy.me 'offers' a BAA, which is true but doesn't confirm your account has one signed.