HIPAA-compliant video for therapists

Doxy.me and VSee Clinic include a signed BAA on a free plan and let clients join from a browser without a download; the cheapest paid option with a BAA is Microsoft 365 Business Basic (with Teams) at $7 per user/month paid yearly.

Last verified · Ranked by our published rules: BAA clarity first, then estimated monthly cost from the vendor's own price. Commission never changes the order. How we verify

Quick picks

Help me choose, for therapists

1. What do you need?
2. Who will use it?
3. What matters most?
  1. Doxy.me BAA plan: Free · Free

    Lowest estimated cost for 1 user: free.

    Visit Doxy.me (opens in a new tab)
  2. VSee Clinic BAA plan: Free · Free

    Lowest estimated cost for 1 user: free.

    Visit VSee Clinic (opens in a new tab)
  3. Microsoft 365 BAA plan: Microsoft 365 Business Basic · $7/mo per user

    Lowest estimated cost for 1 user: $7/mo.

    Visit Microsoft 365 (opens in a new tab)

Ranked by our published rules: BAA clarity first, then estimated monthly cost from the vendor's own price. Commission never changes the order. Estimates multiply per-user prices by team size (just me = 1, 2–10 = 5, 10+ = 10). Flat account prices count once, and only when the vendor states the plan covers that many users. How we verify.

Therapists run telehealth sessions one to one, sometimes with couples or groups, and clients join from their own phone or laptop, so the deciding questions are the BAA, whether clients can join from a browser link, a waiting room, and keeping recording off.

Feature by feature: 7 video platforms

Checked on the vendors' own sites on . "Not stated by vendor" means the vendor's site doesn't say, not that the feature is missing. Each fact links to its source.

What vendors don't publish

We couldn't confirm these on the vendors' sites, so we leave them unresolved rather than guess.

BAA and price at a glance

Vendors compared. Ordered by BAA clarity, then price.
VendorSigns a BAA?Cheapest plan with BAAFromCertificationsVerifiedActions
Doxy.meYes, self-serveFreeFreeSOC 2 (type not stated)Visit Doxy.me (opens in a new tab)
VSee ClinicYes, self-serveFreeFreeNone statedVisit VSee Clinic (opens in a new tab)
OhMDYes, self-serveCore$300/moNone statedVisit OhMD (opens in a new tab)
Microsoft 365Microsoft 365 Business Basic$7/mo per userNone statedVisit Microsoft 365 (opens in a new tab)
Google WorkspaceNot stated$8.40/mo per userNone statedVisit Google Workspace (opens in a new tab)
Zoom (Workplace / Zoom for Healthcare)Pro$14.16/mo per userNone statedVisit Zoom (Workplace / Zoom for Healthcare) (opens in a new tab)
UpdoxYes, through salesNot statedSee vendorNone statedVisit Updox (opens in a new tab)

Ordered by BAA clarity, then price. Every other video vendor is on the full video comparison.

What to check before you choose

Questions

Which video platforms have a free plan with a BAA?

Doxy.me (Free) and VSee Clinic (VSee Free). The other 5 platforms we checked need a paid plan or a quote for a BAA.

What should therapists check before choosing video?

Sign the BAA before the first session with any client, and confirm it covers the exact plan you're paying for (free tiers often don't have one) Check that clients can join from a browser link without installing an app or creating an account, and test it on a phone Turn off cloud recording, auto-recording, transcription and AI note features (and lock them off at admin level if you can) unless you have a documented reason and client consent Use a waiting room or lobby so a client can't walk into another client's session, and use unique or per-session links For couples, family or group sessions, confirm the participant limit and that each person can join from a separate location on your plan Licensure depends on where the client is sitting during the session. That's a separate question from HIPAA and your video vendor can't settle it.

Do I need a BAA for video?

Yes, if the service will create, receive, store or transmit protected health information for you. HHS treats such a vendor as a business associate. A BAA alone doesn't make you compliant: configuration and use matter too. General information, not legal advice. Source: HHS: Business associates.

General information, not legal advice. Confirm BAA terms with the vendor before sending protected health information.

Related