If you run coaching sessions over Zoom and your clients share anything about their health, this question is not optional. The short answer: Zoom can support HIPAA compliance, but it is not HIPAA compliant by default. You need an eligible paid plan, a signed Business Associate Agreement (BAA), and the right settings. Most coaches on a free or standard Pro account have none of those three.
The Direct Answer
Zoom offers a BAA to customers on eligible paid plans, including Zoom for Healthcare and qualifying Business and Enterprise tiers. Free accounts, Basic accounts, and standard Pro accounts do not qualify. And even on an eligible plan, the BAA is not automatic. You have to request it through Zoom’s process, and certain features are restricted once your account is configured for HIPAA.
That last part surprises people. A HIPAA-configured Zoom account limits or disables features coaches often rely on, and Zoom’s AI features are among the things affected. Compliance is a trade you make, not a checkbox.
| Feature | Zoom (free / standard Pro) | Zoom (Healthcare / eligible Business) | Vibly |
|---|---|---|---|
| Signs a BAA | No | Yes, on request | Yes, for all clients |
| HIPAA-ready by default | No | No, requires setup | Yes, built-in |
| Designed for health and wellness coaching | No | No | Yes |
| Scheduling, forms, payments included | No | No | Yes, all-in-one |
| Compliant client messaging | No | Limited | Yes, encrypted |
What HIPAA Actually Requires From a Video Tool
HIPAA does not certify products. It sets requirements that any tool touching protected health information (PHI) must meet: a signed BAA from the vendor, encryption of sessions and stored data, access controls, and support for breach notification.
A video session with a wellness client is rarely just small talk. The moment a client discusses their sleep, weight, medication, stress, or recovery on camera, that conversation involves health information tied to an identity. If your video tool’s vendor has not signed a BAA with you, the compliance gap is yours, not theirs.
Where Coaches Get Caught Out
The free account trap. Zoom’s free tier is excellent for catching up with family. It offers no BAA under any circumstances, which makes it unsuitable for health-related client sessions, full stop.
The “we don’t record” trap. Some coaches assume that if sessions are not recorded, HIPAA does not apply. It does. PHI transmitted in a live session is still PHI, and the transmission itself must be protected under a BAA.
The upgrade-and-forget trap. Buying an eligible plan is step one of three. Without requesting and executing the BAA, and without configuring the account’s HIPAA settings, an eligible plan protects you no better than a free one.
The Simpler Route for Coaches
Zoom can be made compliant if you are willing to buy the right tier, execute the BAA, and manage the settings. For a solo coach or small practice, that is real overhead for one tool that only handles video.
Vibly takes the opposite approach: video sessions are HIPAA compliant out of the box, with a BAA for every client on every plan, alongside scheduling, payments, secure messaging, and intake forms, from $20/month (see plans). Our security practices are documented in the Vibly Trust Center. And if your scheduling tool has the same problem as your video tool, read our guide on whether Calendly is HIPAA compliant. For the full tool-by-tool audit of your practice, see our HIPAA guide for coaches.
Frequently Asked Questions
Is Zoom HIPAA compliant?
Not by default. Zoom offers a BAA on eligible paid plans such as Zoom for Healthcare and qualifying Business and Enterprise tiers. Free, Basic, and standard Pro accounts do not qualify, and even eligible accounts require the BAA to be requested and HIPAA settings to be configured.
Does Zoom sign a BAA?
Yes, for customers on eligible paid plans, and only on request. The BAA is not applied automatically when you purchase a qualifying plan.
Can I use free Zoom for coaching sessions?
For general coaching with no health information, yes. For health and wellness coaching where clients discuss their physical or mental health, no. Free Zoom offers no BAA, so it cannot be used compliantly with PHI.
What happens to Zoom features under HIPAA settings?
Zoom restricts certain features on HIPAA-configured accounts to limit PHI exposure, including some AI and recording functionality. Check Zoom’s current HIPAA documentation for the exact list, as it changes over time.
Do wellness coaches really need to worry about HIPAA?
If you handle protected health information, HIPAA can apply to you, and clients increasingly expect compliant tools regardless of your legal obligations. A signed BAA is the clearest signal that a vendor takes this seriously.
