Is RingCentral HIPAA compliant?
Yes, if you are a paying customer, ask RingCentral for their business associate agreement and sign it, and keep patient information within the specific services that agreement names.
Applies to RingCentral RingEX and related services. Last reviewed against RingCentral's own documentation. Next review December 12, 2026.
Reviewed by Carlos Mendez — IT Security Manager, regional healthcare network.
What you must do
- Be a paying RingCentral customer. RingCentral makes the agreement available to paying covered entity customers.
- Request it from your RingCentral representative at the time you purchase; if you have no direct representative, email legal@ringcentral.com.
- Use RingCentral's own standard form — RingCentral states it cannot accept a customer's own agreement.
- Keep patient information inside the covered services: RingCentral Fax, RingEX, RingCX, Contact Center, Engage Digital, AI Conversation Expert, AI Quality Management, AIR Pro, AI Receptionist, AI Supervisor Assist, AI Agent Assist and the Customer Engagement Bundle.
- For third-party products purchased through RingCentral, read that product's own terms, which can remove it from coverage.
Does RingCentral sign a business associate agreement?
Yes. RingCentral offers one. Any paid plan. RingCentral does not publish a minimum edition requirement — the stated condition is 'paying Covered Entity customers'. Ask your RingCentral representative during the purchase process, or email legal@ringcentral.com if you have no direct representative.
What this means in practice
RingCentral is more accessible than most vendors on this list because there is no published minimum edition. The stated condition is simply that you are a paying customer and a covered entity. What there is not, however, is anything automatic. You have to ask, ideally of your representative at the point of purchase, or by emailing RingCentral's legal team if you bought without one. Plenty of clinics have paid for years on the assumption that a business phone system sold to healthcare arrives covered.
One detail saves a wasted month: RingCentral will not accept your organization's own agreement template. You sign theirs. If your compliance officer's default move is to send out a house form, tell them in advance.
Coverage is drawn as a named list, which is broad and includes RingEX, RingCX, Fax, Contact Center, Engage Digital and a range of AI services. It is still a list. Third-party channel communications inside Engage Digital are explicitly excluded, add-ons not named are outside it, and third-party products bought through RingCentral follow their own terms.
How organizations get this wrong
The specific mistakes we see with RingCentral, not generic advice.
- Buying RingCentral online and never asking for the agreement, assuming a phone system marketed to clinics arrives covered by default.
- Sending RingCentral your own house agreement template and waiting on a signature they have said they cannot give.
- Running patient conversations through a third-party channel inside Engage Digital, which the covered-services list explicitly excludes.
- Adding an unnamed add-on service or a third-party product on the RingCentral bill and assuming coverage stretches to it.
What the agreement does not cover
- Third-party channel communications within RingCentral Engage Digital, explicitly excluded.
- Third-party products where their own terms or data protection terms say otherwise.
- Any RingCentral service not named in the covered-services list, including add-on services.
Alternatives
Listed on merit. We take no payment for placement and use no affiliate links.
A smaller practice already on Workspace can stay under one amendment
If you need a custom-built phone workflow rather than a packaged system
Signing the agreement is step one. Proving it is step two.
Once you have the agreement with RingCentral, someone has to know it exists, where the copy is, when it needs revisiting and who owns it. That register is what a client's security questionnaire is actually asking about, and it is the section of an evidence pack most organizations cannot produce on request.
$79/month, 14-day free trial, no credit card. The checker itself stays free and needs no account.
Sources
Every statement above comes from RingCentral’s own published documentation, read on the date shown.
- RingCentral and HIPAA (March 2026) — RingCentral. Published March 1, 2026. Read July 29, 2026.
- RingCentral Business Associate Agreement (BAA) — RingCentral. No publication date given. Read July 29, 2026.
Change history
- — First published.
This page is information, not certification and not legal advice. It reflects RingCentral’s published documentation as read on July 29, 2026; vendors change their terms without notice, so confirm anything you rely on directly with the vendor. Whether your own use is compliant depends on your configuration, your executed agreement and how your staff actually work. No company can be “HIPAA certified” — no such designation exists.
Think something here is wrong or out of date? Tell us at support@hipaacompliancesoftware.org — corrections are published with a dated note in the change history above, never silently. See our editorial standards for how entries are researched and re-verified.