CompyMax

Is VSee HIPAA compliant?

Only under specific conditions

Yes for VSee Clinic once you email their compliance address and get the agreement signed, but the free VSee Messenger app is excluded, and VSee's own pages disagree about whether the free Clinic tier needs a paid subscription first.

Applies to VSee Clinic telehealth. Last reviewed .

Researched and maintained by the CompyMax editorial team to our published standards.

What you must do

  • Request the agreement by emailing hipaa-baa@vsee.com: the route VSee documents, rather than general sales or support.
  • Use VSee Clinic, the telehealth product, not the consumer VSee Messenger app.
  • Get the plan question answered in writing before relying on the free tier. VSee's pricing page and its HIPAA page state different conditions.
  • Have the signed agreement in hand before the first patient visit.
  • Treat VSee's encryption and security attestations as supporting evidence, not as the agreement: VSee itself says compliance requires signing.

Does VSee sign a business associate agreement?

Yes. VSee offers one. All VSee plans except free VSee Messenger, per the pricing page. The HIPAA page instead conditions the free Clinic version on a minimum paid subscription: confirm which applies. Email hipaa-baa@vsee.com and request the signed agreement. Confirm at the same time which plan the executed agreement attaches to.

See their documentation.

What this means in practice

VSee will sign, and the request is a single email to a dedicated compliance address rather than a sales cycle. What VSee does not do is state clearly which tier that agreement attaches to, and its own pages contradict each other on the point.

The pricing page says VSee signs for every plan except the free Messenger app, and the free Clinic tier lists a signed agreement among its features. The dedicated HIPAA page says something different: that the agreement covering the free Clinic version comes with a minimum paid subscription. Settle that in writing before you build a practice on the free tier.

The distinction that actually matters is product, not price. VSee Messenger, the consumer chat app, sits outside the agreement; VSee Clinic is the telehealth product built for clinical use. Encryption is strong either way, but encryption is not an agreement, and VSee says as much itself.

How organizations get this wrong

  • Using VSee Messenger for a patient visit because it is free and already installed: the messenger app is the one product VSee names as excluded.
  • Relying on the free Clinic tier's 'signed BAA' feature line without checking the HIPAA page, which attaches a paid subscription condition to that same agreement.
  • Emailing general sales instead of the dedicated compliance address and waiting weeks for a reply.
  • Treating VSee's encryption or security attestations as the agreement. Neither makes VSee your business associate; the signed document does.

What the agreement does not cover

  • Free VSee Messenger. VSee states it signs for all plans except this one.
  • VSee publishes no covered-services list, so individual Clinic features and add-on modules are not separately confirmed.
  • VSee's security attestations and encryption, which describe its programme rather than contractual coverage.

Alternatives

  • Doxy.me

    Free self-serve agreement generated in the account, with no plan ambiguity to resolve first

  • SimplePractice

    Telehealth included on every plan under an agreement accepted at signup

Keep a record of your VSee agreement

Sources

  1. How Do I Get a BAA?: VSee. Read July 29, 2026.
  2. Is VSee HIPAA compliant?: VSee. Read July 29, 2026.
  3. VSee Telehealth Platform | Pricing Plans: VSee. Read July 29, 2026.

VSee can change these terms at any time. If something here no longer matches what VSee tells you, tell us.