All tools / Video and messaging
Is Webex HIPAA compliant?
Checked 6 Nov 2026 from 4 vendor sources
Cisco’s Webex pages link to a DocuSign form to start a BAA, but they do not say which plans or products it covers. The vendor’s position isn’t clear enough to rely on. Treat it as unsafe for patient data until the vendor confirms in writing.
How to get the BAA
Use the Need a BAA link on Cisco’s Webex trust page, which opens a DocuSign form.
What we couldn’t confirm
Cisco’s pages don’t say which plans the BAA covers, so don’t assume Webex Free is included. Most of the evidence dates from 2021 to 2023, and we found nothing on AI features.
Proof from the vendor
- Cisco Webex Trusted PlatformNeed a BAA link to DocuSign form; self-assessment available under NDA
- Protecting Your Webex Healthcare DataLink to initiate a BAA; self-assessment named Teams, Meetings, Control Hub and Webex for Developers (last modified Nov 21, 2023)
- Cisco Webex Suite and Contact Center: HIPAA ComplianceLists services assessed and customer responsibilities; does not offer customers a BAA (dated Sept 30, 2021)
- Webex Plans and PricingNeither HIPAA nor BAA is mentioned for Webex Free or Webex Enterprise
This isn’t legal advice. A BAA is one requirement. Your clinic still has to set the tool up correctly and control who has access. Vendors change their terms, so confirm with the vendor before you sign. PHI means protected health information, which includes patient data.