Does TherapyNotes Sign a HIPAA Business Associate Agreement?
By BAA Generator Editorial · Published Apr 20, 2026 · Last reviewed Apr 20, 2026 · 5 min read
Key Takeaways
- ✓ Yes — TherapyNotes includes a HIPAA BAA in their standard subscriber agreement
- ✓ BAA coverage applies to all subscription tiers — no separate signature step required
- ✓ Built-in telehealth is covered under the same BAA as the rest of the platform
- ✓ TherapyNotes is purpose-built exclusively for behavioral health providers
TherapyNotes is one of the most respected EHR platforms in behavioral health — used by solo therapists, group practices, and community mental health centers. Because it is exclusively designed for behavioral health providers, HIPAA compliance is built into the product's foundations rather than layered on as an afterthought.
TherapyNotes Plan BAA Coverage
Unlike some vendors that restrict BAA access to higher-priced tiers, TherapyNotes extends BAA coverage to all subscription levels. The BAA is part of the core subscriber agreement.
| Plan / Feature | BAA Available | Notes |
|---|---|---|
| Solo Clinician Subscription | Yes | Included in standard subscriber agreement |
| Group Practice Subscription | Yes | Covers all clinicians under the practice account |
| Telehealth (built-in video) | Yes | Native video is covered under the platform BAA |
| Billing & Claims Processing | Yes | Insurance billing features covered under platform BAA |
How to Get a HIPAA BAA from TherapyNotes
TherapyNotes incorporates its Business Associate Agreement into the subscriber agreement accepted during account setup. In practice, this means:
- When you create a TherapyNotes account and accept their terms of service, you are accepting the BAA terms
- TherapyNotes publishes their BAA on their website for review before acceptance
- You do not need to separately request, negotiate, or counter-sign a BAA document
- You should retain documentation of your agreement acceptance date for your compliance records
Always verify the current BAA process directly with TherapyNotes, as platforms can update their agreement procedures. If your organization requires a countersigned BAA document, contact TherapyNotes' compliance team to request one.
What TherapyNotes' BAA Covers
TherapyNotes' BAA governs how they handle PHI stored and processed through their platform, including:
- Clinical documentation — therapy notes, treatment plans, assessments, and progress notes
- Scheduling and appointment management — patient calendars, reminders, and waitlists
- Billing and insurance claims — electronic claims submission, ERA, and billing history
- Secure messaging — HIPAA-compliant communication between clinicians and clients
- Built-in telehealth — TherapyNotes' native video session platform
- Patient portal — secure intake forms and document exchange
What Happens If You Use TherapyNotes Without a BAA?
If you are using TherapyNotes to store or transmit PHI and have not accepted their subscriber agreement (which contains the BAA), you would be operating without the required contractual safeguard under HIPAA. In practice, this is unlikely — you cannot use the platform without accepting the terms — but practices should confirm that their acceptance is documented and that the agreement on file is current.
For a broader view of which vendors include BAAs in their standard agreements versus which require separate execution, see our guide on which vendors sign a HIPAA BAA. For behavioral health-specific compliance context, see our resource on BAA requirements for behavioral health providers.
TherapyNotes vs. SimplePractice: BAA Comparison
Both TherapyNotes and SimplePractice are widely used by behavioral health providers and both provide HIPAA BAAs. The key operational difference is in how BAA execution works:
- TherapyNotes: BAA is embedded in the subscriber agreement — no separate signing step
- SimplePractice: BAA requires a separate electronic signature through account settings
Neither approach is inherently better from a compliance standpoint — what matters is that a valid, executed BAA exists before PHI is transmitted. Both platforms are built exclusively or primarily for healthcare, which means HIPAA compliance features are integrated throughout rather than bolted on.
Frequently Asked Questions
Does TherapyNotes sign a HIPAA BAA?
Yes — TherapyNotes includes a HIPAA BAA as part of their standard subscriber agreement. All subscribers are covered by the BAA upon accepting TherapyNotes' terms of service. There is no separate signature process, though you should verify the current process with TherapyNotes and retain documentation of your agreement acceptance.
Is TherapyNotes HIPAA compliant?
Yes — TherapyNotes is purpose-built for behavioral health providers and includes all core HIPAA safeguards: data encryption in transit and at rest, role-based access controls, audit logging, automatic session timeouts, and a Business Associate Agreement. TherapyNotes is used by solo clinicians and large group practices throughout the United States.
Does TherapyNotes cover telehealth under its BAA?
Yes — TherapyNotes includes built-in telehealth video functionality that is covered under the same BAA as the rest of the platform. Providers using TherapyNotes' native video feature do not need a separate BAA for those sessions. If you use a third-party video platform (such as Zoom or Doxy.me) alongside TherapyNotes, those tools require their own BAAs.
How does TherapyNotes compare to SimplePractice for HIPAA compliance?
Both TherapyNotes and SimplePractice are strong HIPAA-compliant EHR choices for behavioral health. TherapyNotes incorporates the BAA into the standard subscriber agreement; SimplePractice requires a separate self-service BAA signature. Both cover telehealth, billing, and clinical documentation. Differences between the platforms are primarily in workflow, pricing, and user experience rather than HIPAA compliance depth.
Need a BAA for your TherapyNotes integration?
Generate a HIPAA-compliant Business Associate Agreement in minutes — covers all vendor types, free to start.
Generate Your BAA Free →