G
On some plansIs GoHighLevel HIPAA compliant?
Checked 6 Nov 2026 from 2 vendor sources
HighLevel offers a BAA through a HIPAA add-on listed at US$297 per month, available to agencies on any plan, or included in its Enterprise plan. Accounts are not set up for HIPAA by default. So the answer depends on your plan. Check yours below before any patient data goes in.
| Plan or product | BAA |
|---|---|
| Accounts and sub-accounts without the HIPAA add-on enabled | Not covered |
| Agency accounts on any plan with the paid HIPAA add-on, or Enterprise where HIPAA is included; BAA signed and HIPAA turned on per sub-account | Covered |
How to get the BAA
Buy the HIPAA package in the agency account under Settings, then Compliance, and sign the BAA there.
What the vendor says to do
- In the agency account, go to Settings, then Compliance
- Buy the HIPAA package and accept the acknowledgement
- Open the BAA in the Compliance section, review signer details and sign
- For each sub-account, open Advanced Settings and turn on the HIPAA toggle
Proof from the vendor
- HighLevel pricingHIPAA add-on price and Enterprise inclusion
- HIPAA Compliance With HighLevelPrice, eligible plans, not on by default, data types covered, steps, no refund or removal (modified June 11, 2026)
This isn’t legal advice. A BAA is one requirement. Your clinic still has to set the tool up correctly and control who has access. Vendors change their terms, so confirm with the vendor before you sign. PHI means protected health information, which includes patient data.