Is SimplePractice HIPAA compliant?
Yes, you agreed to SimplePractice's business associate agreement when you started your trial, it covers every feature including telehealth on all plans, and you never sign it again.
Applies to SimplePractice practice management and telehealth. Last reviewed .
Researched and maintained by the CompyMax editorial team to our published standards.
What you must do
- Nothing to request. SimplePractice states that creating a trial account means agreeing to the business associate agreement, the terms of service and the privacy policy.
- No re-signing on upgrade: you do not re-agree when moving from a trial to a paid account.
- Keep a copy of the published agreement text for your compliance file, since there is no separately countersigned document.
- Before switching on AI add-ons such as Note Taker, read the separate addendum for AI products: those features sit under it rather than the main agreement.
- Since 17 June 2026 SimplePractice may retain de-identified, de-coupled transcripts to improve AI features. Set the retention preference at clinician, client or session level if you do not want this.
- Recording a session raises state consent law. SimplePractice supplies a consent form and notes a number of states require all-party consent.
- Export your data before cancelling: SimplePractice de-identifies records within 64 days of termination.
Does SimplePractice sign a business associate agreement?
Yes. SimplePractice offers one. All plans. The agreement is accepted at trial signup before any plan is chosen, and telehealth is included on every plan. Nothing to request. Acceptance happens when you tick the box and start the free trial. Read or save the current text at simplepractice.com/baa.
What this means in practice
There is nothing to request here. You accepted SimplePractice's business associate agreement the moment you ticked the box to start a trial, alongside the terms of service and privacy policy, and you do not sign it again when you move onto a paid subscription. The text sits publicly on their site, which is what you keep for your file.
Coverage is not plan-gated. Telehealth is included at no extra cost on every plan, and the agreement reaches the whole platform rather than a named list of modules. Two things are limited by plan rather than by the agreement: secure client messaging is absent from the entry tier, and adding non-clinician team members needs the top plan.
The part that deserves attention is the AI add-on. Note Taker runs under a separate addendum, not the main agreement, and since 17 June 2026 SimplePractice may keep de-identified, de-coupled transcripts to improve its AI features unless you change the retention setting. Recording a session also brings state consent law into play, which SimplePractice flags but leaves to you.
How organizations get this wrong
- Switching on Note Taker without reading the AI addendum: de-identified transcript retention is the default and must be turned off per clinician, client or session.
- Recording sessions without all-party consent. SimplePractice supplies a consent form but does not check your state's recording law for you.
- Buying the entry plan and then needing to message clients securely, so staff improvise with personal email or text.
- Cancelling without exporting first. Records are de-identified within 64 days of termination, while your own retention obligations outlive the subscription.
What the agreement does not cover
- Secure client messaging on the entry plan: a plan limit rather than an agreement limit, but it pushes staff toward uncovered channels.
- Adding non-clinician team members such as schedulers and billers, which requires the top plan.
- AI add-on products including Note Taker, governed by a separate AI addendum.
- SimplePractice does not publish a position on signing a customer's own agreement template.
Alternatives
Free self-serve agreement if you only need the video visit and keep records elsewhere
Keep a record of your SimplePractice agreement
Sources
- SimplePractice BAA, Terms of Service, and Trust & Security information: SimplePractice. Read July 29, 2026.
- SimplePractice Business Associate Agreement: SimplePractice. Read July 29, 2026.
- Note Taker FAQs: SimplePractice. Read July 29, 2026.
SimplePractice can change these terms at any time. If something here no longer matches what SimplePractice tells you, tell us.