Is RingCentral HIPAA compliant?
Checked 6 Nov 2026 from 4 vendor sources
RingCentral offers its own BAA to paying covered entity customers for a listed set of products, and will not accept a customer’s BAA. So the answer depends on your plan. Check yours below before any patient data goes in.
| Plan or product | BAA |
|---|---|
| Non-paying customers | Not covered |
| RingEX | Covered |
| RingCX | Covered |
| RingCentral Fax | Covered |
| RingCentral Contact Center | Covered |
| RingCentral Engage Digital | Covered |
| RingCentral AI Conversation Expert | Covered |
| RingCentral AI Quality Management | Covered |
| RingCentral AIR Pro | Covered |
| RingCentral AI Receptionist | Covered |
| RingCentral AI Supervisor Assist | Covered |
| RingCentral AI Agent Assist | Covered |
| Customer Engagement Bundle | Covered |
What the BAA leaves out
- Third-party channel communications on Engage Digital
- Third-party products where their own terms say otherwise
- Services not on the BAA list
- RingCentral does not sign a BAA with patients or other third parties on a call
How to get the BAA
Ask your RingCentral representative, or email [email protected] if you have none.
What the vendor says to do
- Request and sign RingCentral’s BAA
- Use RingCentral’s controls to decide how PHI is managed and accessed
- Have patients use the RingCentral Video Pro app or Pro web version when communicating with you
What we couldn’t confirm
RingCentral’s documents differ on whether business associates qualify and on the exact product list, and they don’t address SMS. Confirm your products in writing.
Proof from the vendor
- RingCentral and HIPAA (March 2026)Paying customers, covered product list, third-party exclusions, patient app requirement
- RingCentral Business Associate Agreement (BAA)How to request the BAA; customer’s own BAA not accepted
- RingCentral HIPAA ComplianceCovered entities or business associates handling PHI must request a BAA
- RingSense for Sales and RingSense for RingCX and HIPAA (June 2024)BAA available for paying covered entity customers of these products
This isn’t legal advice. A BAA is one requirement. Your clinic still has to set the tool up correctly and control who has access. Vendors change their terms, so confirm with the vendor before you sign. PHI means protected health information, which includes patient data.