Is SimplePractice HIPAA compliant?
Checked 6 Nov 2026 from 4 vendor sources
SimplePractice says customers agree to its BAA by ticking a box when creating a trial account, with no new signature needed on upgrading to a paid account. A BAA is one requirement. Your clinic still has to set the tool up correctly and control who has access.
How to get the BAA
Accept the BAA by ticking the box when starting a trial account; the agreement carries over on upgrade.
What we couldn’t confirm
We couldn’t read the BAA text or the plan comparison, so plan-by-plan coverage and exclusions aren’t verified. AI add-ons have their own addendum to the Terms of Service, so ask how it relates to the BAA.
Proof from the vendor
- SimplePractice BAA, Terms of Service, and Trust & Security informationBAA accepted at trial signup, carried to paid account; separate AI addendum
- Care Aide FAQsCare Aide is a paid add-on governed by the Terms and AI addendum; PHI handled under the BAA
- Note Taker FAQsNote Taker is an optional add-on on all plans; de-identified transcripts may be retained from 16 June 2026, with controls
- SimplePractice security and third-party pixels1 May 2026 statement: no third-party pixels in the product; pixels on its public marketing site
This isn’t legal advice. A BAA is one requirement. Your clinic still has to set the tool up correctly and control who has access. Vendors change their terms, so confirm with the vendor before you sign. PHI means protected health information, which includes patient data.