Aspire Builder Pro Logo

    HIPAA Compliance at Aspire Builder Pro

    The HIPAA plan is built to support HIPAA compliance. It includes a signed Business Associate Agreement and technical safeguards. Compliance is shared between us and your practice, and this page explains who does what.

    Last updated: October 10, 2026

    The Short Version

    • No software can make a practice HIPAA compliant by itself
    • The HIPAA plan gives you a signed Business Associate Agreement (BAA) and the technical safeguards the rules call for
    • Your practice remains responsible for its own policies, training and how the tools are used
    • The Standard plan is not designed for protected health information

    What the HIPAA Plan Includes

    • A signed Business Associate Agreement
    • Encryption of data in transit and at rest
    • Role-based access controls, so each team member sees only what they need
    • Audit logs that record account activity
    • Required multi-factor login

    How the BAA Works

    Under HIPAA, a healthcare practice is usually a covered entity. A vendor that stores or handles protected health information for the practice is a business associate, and the two must have a written agreement in place.

    Aspire Builder Pro is built on HighLevel infrastructure. We maintain a Business Associate Agreement with our infrastructure provider, and we sign a Business Associate Agreement with you when you join the HIPAA plan. Your HIPAA plan account is then set up with HIPAA mode switched on.

    What We Are Responsible For

    • Providing the platform safeguards listed above
    • Signing and honoring the Business Associate Agreement
    • Setting up your HIPAA plan account with HIPAA mode switched on
    • Telling you about security incidents as the Business Associate Agreement requires

    What Your Practice Is Responsible For

    • Your own HIPAA policies, procedures and risk analysis
    • Training your team
    • Deciding who gets a login and removing access when someone leaves
    • Keeping protected health information on the HIPAA plan and out of tools that are not covered
    • The wording of your emails, text messages and reminders
    • Getting patient authorization where the rules require it, such as for some marketing messages
    • Having agreements in place with any other vendors you use

    Messages, AI Features and Outside Apps

    Standard email and text messages travel across networks we do not control. Keep message content to the minimum needed, such as a name, date and time, and keep details about a person's care out of them.

    Before you use AI features or connect outside apps to an account that holds patient information, check with us first. Services provided by other companies may not be covered by the Business Associate Agreement.

    The Standard Plan

    The Standard plan is built for businesses that do not handle protected health information, such as many coaches, educators and wellness brands. If you are not sure whether HIPAA applies to you, ask a compliance professional before you choose a plan.

    Common Questions

    Is Aspire Builder Pro HIPAA compliant?

    The HIPAA plan is designed for HIPAA-compliant use. Whether your practice is compliant also depends on your own policies, training and setup.

    Do you sign a BAA?

    Yes. A signed Business Associate Agreement is included with the HIPAA plan at $297 per month.

    Can I use the Standard plan for patient information?

    No. Protected health information belongs on the HIPAA plan.

    Is Aspire Builder Pro an EHR?

    No. It does not replace clinical charting or insurance billing software. It runs the business side of your practice and can be used alongside your EHR.

    Related Guides

    Jeff Caldwell
    Hi there! Have a question? Chat with us here.