Choosing a HIPAA-Compliant Technology Stack for Couples Sessions
Zoom for Healthcare requires a paid Pro plan at $149.90 per license annually (2026 pricing) and a signed Business Associate Agreement to meet HIPAA requirements for telehealth sessions.1 This is not automatic; free Zoom accounts and non-healthcare paid plans do not qualify for HIPAA compliance, regardless of what you toggle in settings.
What HIPAA Compliance Actually Means for Video Therapy
HIPAA compliance for a video platform hinges on four technical and contractual requirements. First, the vendor must sign a Business Associate Agreement (BAA) that formally accepts liability for protected health information (PHI) transmitted through its service. Second, the platform must encrypt video and audio streams in transit (during the session) and at rest (if recordings are stored). Third, access controls must prevent unauthorized users from joining sessions, typically through unique meeting links or waiting-room features. Fourth, the platform should maintain audit logs that track who accessed what data and when, though this is less visible to practitioners than the first three requirements.
A platform that markets itself as "HIPAA-ready" or "secure" without offering a BAA is not sufficient. The BAA is the legal mechanism that makes the vendor a covered entity under HIPAA; without it, you bear full liability for any breach that occurs on their infrastructure.
Comparing Platforms for Multi-Participant Couples Sessions
For couples therapy, multi-participant video support is non-negotiable. Zoom for Healthcare (Pro tier) supports up to 100 participants per session and allows 30-hour meeting durations, more than adequate for standard 50-minute or 90-minute couples sessions.1 The Pro plan is available on Business, Business Plus, and Enterprise tiers, all of which include BAA eligibility.
Doxy.me is a browser-based alternative popular among solo practitioners. It requires no software installation for clients, offers a free tier with a signed BAA (a rarity), and supports multi-party video for couples. The free version is ad-supported and lacks advanced features like screen sharing and session recording; paid tiers range from $35 to $49 per month in 2026.3
SimplePractice Telehealth and TherapyNotes embed video directly into their practice management platforms, which streamlines the workflow from scheduling to documentation. Both support couples sessions and include BAAs at no additional cost if you subscribe to their full EHR service. SimplePractice for marriage and family therapists starts at $29 per month for solo practitioners (2026), while TherapyNotes begins at $49 per month. The trade-off is less flexibility: you are locked into their ecosystem for billing, notes, and client communication.
Relational EHR Configuration for Couples Cases
Setting up a couples case in an EHR requires deciding whether to treat the couple as a single relational file or two individual client records with a shared case. SimplePractice and TherapyNotes both offer "relationship" or "family" case types that link two client profiles under one treatment plan. This allows you to bill jointly (if appropriate) and maintain a shared session log.
The confidentiality challenge arises when you conduct individual sessions with one partner. Best practice is to create individual progress notes for solo sessions that are not visible to the other partner, while joint session notes remain accessible in the shared case file. Both platforms allow you to toggle note visibility by client, but the default settings vary. Review your EHR's permission structure during setup and document your protocol in your informed consent.
Contingency Plans for Technology Failures
Video drops happen. Establish a backup phone number protocol with every couple at intake: if the connection fails, who calls whom, and on what number? Document this in your telehealth consent form. Decide in advance whether a session interrupted by technical failure will be billed for the partial time completed or rescheduled without charge; transparency prevents billing disputes.
Recordings should be avoided unless clinically necessary and explicitly consented to by both partners. If you do record, store files in a HIPAA-compliant cloud service (Google Workspace with a BAA, Microsoft 365 with a BAA, or your EHR's document storage) and delete them once transcribed or reviewed. Never store recordings on a personal device without encryption.
Secure messaging between sessions requires the same BAA standard as video. SimplePractice and TherapyNotes include encrypted client portals for asynchronous communication. If you use a third-party tool like Google Workspace, ensure your BAA covers email and shared documents. Shared digital worksheets (e.g., a Google Sheet for tracking communication patterns) must live within a BAA-covered environment; a personal Dropbox link is not compliant.