High Level Admins
Category: Compliance

Is GoHighLevel HIPAA Compliant?

Short answer

Not by default. HighLevel sells a HIPAA package for $297 a month that includes a signed Business Associate Agreement, and it’s permanent once purchased: non-cancellable and non-refundable.

Checked against HighLevel’s help center on . HighLevel updates its interface often, so match the labels you see on screen.

What the package includes

  • A Business Associate Agreement, signed inside HighLevel under Settings, then Compliance
  • Encryption of protected health information at rest and in transit
  • Audit logging and multi-factor authentication enforcement
  • Coverage for contacts, notes, custom fields, SMS, voice recordings, email, form submissions, calendars, and invoices

How to turn it on

  1. 1In the agency account, go to Settings, then Compliance.
  2. 2Click “Buy HIPAA Package at $297 per Month,” accept the acknowledgement, and subscribe.
  3. 3Sign the BAA from the Compliance section.
  4. 4Turn on the HIPAA toggle for each sub-account under Advanced Settings.

These settings are permanent

The add-on can’t be cancelled, and a sub-account’s HIPAA toggle can’t be turned off. Contacts deleted in a HIPAA sub-account can’t be restored.

What HighLevel doesn’t spell out

HighLevel’s HIPAA article doesn’t say whether WhatsApp, AI features beyond review responses, Marketplace apps, Zapier, or webhooks are covered. Treat anything it doesn’t list as outside the BAA until HighLevel confirms it in writing.

The agency has to meet HIPAA itself, too, so it can sign its own BAA with the practice. This page summarizes HighLevel’s documentation and isn’t legal advice.

Want Help With This?

Have us do it

Setting up a healthcare practice in HighLevel? We configure the account with these limits in mind from day one.

Schedule a Fit CallGoHighLevel Setup

Sources

High Level Admins is an independent HighLevel service provider, not HighLevel’s official support team.

Related Answers

How Do I Contact GoHighLevel Support?How Do I Create and Import a Snapshot in GoHighLevel?How Do I Connect a Domain to GoHighLevel?
See every answer

Important Disclaimers

Transparency and compliance information for our HighLevel services

Trademark Notice

We make no claims to the trademarks, brand marks, copyrights, ideas, intellectual property, or likeness of HighLevel. HighLevel, GoHighLevel, and LeadConnector are trademarks of HighLevel LLC. We are independent specialists who provide implementation and support services.

Financial Disclaimers

We make no financial guarantees regarding results, ROI, or business outcomes. Past results from our clients or any examples shared do not represent future outcomes for any individual or business. Your results may vary based on numerous factors including but not limited to your industry, market conditions, implementation, and business practices.

Professional Services

Our services are provided independently of HighLevel. While we specialize in HighLevel implementations, any support, training, or consulting we provide is our own professional service. HighLevel LLC does not own, operate, or sponsor High Level Admins.

Platform Independence

High Level Admins is in no way connected to, affiliated with, endorsed by, or sponsored by Meta (Facebook), Google, or any other advertising platform where our advertisements may be served or our business name may be mentioned. We operate as an independent service provider.

Certification Note

Our team is led by a HighLevel Certified Admin. Not every team member holds an official HighLevel certification, and some specialize in specific areas of the platform.

Read all disclaimers