ChatGPT answers, unedited

For executive coaching, I’d treat “HIPAA-like” as a security/privacy standard rather than assuming HIPAA legally applies. HIPAA generally applies to covered health-care entities and their business associates; other privacy obligations can still apply to businesses handling sensitive information. Federal Trade Commission

Platforms worth considering

HHS has specifically identified Teams, Zoom, Google Meet, Webex, VSee and doxy.me among remote-communication products that can support HIPAA-oriented use with appropriate contractual arrangements; importantly, HHS does not certify or endorse these vendors. HHS.gov

What I'd prioritize for an executive-coaching practice

1. Zoom — probably the simplest fit if your primary requirement is excellent 1:1 and group video. Zoom explicitly offers BAAs and says its BAA-enabled configurations can support HIPAA compliance; you still have responsibility for configuring and using it appropriately. Zoom Zoom

2. Microsoft Teams — particularly compelling if you're already using Microsoft 365 for email, documents and calendars. Microsoft documents Teams' security/compliance capabilities and HIPAA support. Microsoft Support

3. Google Workspace + Meet — a good choice if your practice runs on Gmail/Drive/Calendar. Google provides a BAA for customers subject to HIPAA and specifies which Workspace functionality is included. Google Workspace Help

The important part: the platform isn't the whole privacy solution

For coaching clients, I'd configure whichever platform you choose roughly like this:

• Require authenticated/identified participants where practical.
• Use unique meeting links rather than one permanent room link.
• Enable a waiting room/lobby for group sessions.
• Disable automatic recording.
• Disable or tightly control AI meeting assistants, transcription and automated summaries unless clients have explicitly agreed to them and you've reviewed the provider's data terms.
• Restrict screen sharing to the host by default.
• Control chat, file transfer and meeting recordings.
• Use MFA and strong admin passwords.
• Keep recordings/transcripts out of ordinary cloud storage unless you genuinely need them.
• Establish a written retention/deletion policy for coaching notes, recordings, transcripts and client communications.
• Have a client-facing privacy notice/consent process explaining what you collect, where it's stored, who can access it, and whether sessions are recorded/transcribed.

Google, for example, says Meet recordings and transcripts are stored when those features are activated, whereas ordinary meeting media is encrypted in transit; Google also offers client-side encryption for organizations needing an additional encryption layer. Google Help Google Help

One especially important distinction: a vendor saying “HIPAA compliant” isn't the same as your coaching practice being HIPAA compliant. A BAA, where applicable, is part of the contractual framework, but your own policies, configuration and data-handling practices matter too. HHS explicitly says organizations using cloud services for ePHI need an appropriate BAA and their own risk analysis. HHS.gov

If you tell me (a) whether you're solo or have a coaching team, (b) whether you already use Google Workspace or Microsoft 365, and (c) whether you need recording/transcription/AI notes, I can narrow this to a practical 2–3 platform shortlist and a secure configuration checklist.

2. Microsoft Teams — particularly compelling if you're already using Microsoft 365 for email, documents and calendars. Microsoft documents Teams' security/compliance capabilities and HIPAA support. support.microsoft.com

3. Google Workspace + Meet — a good choice if your practice runs on Gmail/Drive/Calendar. Google provides a BAA for customers subject to HIPAA and specifies which Workspace functionality is included.

The important part: the platform isn't the whole privacy solution

For coaching clients, I'd configure whichever platform you choose roughly like this:

For an executive-coaching practice, I’d treat “HIPAA-like” as a security/privacy standard rather than assuming HIPAA legally applies. HIPAA generally applies to covered entities and business associates handling PHI; ordinary executive coaching may fall outside that scope. Zoom Microsoft Learn

For 1:1 coaching + confidential group sessions, these are the main platforms I’d consider:

My practical shortlist

Zoom is probably the easiest fit if your core requirement is secure coaching conversations and group calls. Zoom explicitly offers BAAs and a HIPAA-oriented configuration, and its paid plans can be used under a BAA. Zoom Zoom

Microsoft Teams makes particular sense if you already use Microsoft 365. Microsoft documents HIPAA-related compliance capabilities, and Teams supports E2EE for 1:1 calls; E2EE is also available for certain Teams meetings, although it doesn't encrypt every meeting feature such as chat and Q&A. Microsoft Support Microsoft Support Microsoft Support

Google Meet is viable if your practice already lives in Google Workspace. Google currently lists Meet among the functionality covered by its HIPAA Business Associate Addendum, subject to the applicable Workspace agreement and configuration. Google Workspace

The important part isn't just the platform

For sensitive coaching data, I'd configure whichever platform you choose along these lines:

• Use a paid business/enterprise tier with an executed BAA if you actually handle PHI. “Encrypted” by itself isn't equivalent to HIPAA compliance. Zoom Medcurity
• Require unique meeting links/passcodes and a waiting room/lobby for groups.
• Don't allow participants to join anonymously when identity matters.
• Disable recording by default. If you record, establish explicit retention, access, and deletion rules.
• Treat transcripts, AI meeting summaries, chat, shared files, and recordings as sensitive data, not merely the video stream.
• Restrict screen sharing and file transfer where practical.
• Use MFA and separate business accounts rather than consumer accounts.
• Make sure your calendar invitations don't reveal sensitive client information—e.g., use “Coaching Session” rather than a client's issue or diagnosis.
• Review every integration that touches the data. A secure video platform doesn't automatically make your CRM, transcription service, AI note-taker, scheduler, or cloud storage secure.

One subtle point: E2EE isn't necessarily the deciding factor for your use case. For example, Teams' E2EE protects audio/video/screen sharing in supported modes, but not chat, apps, reactions, or Q&A. Microsoft Support For coaching, your overall data lifecycle can matter more than whether the video itself has E2EE.

If you tell me (1) whether you're a solo coach or have a coaching firm, (2) roughly how many clients, and (3) whether you need recordings/transcripts/AI notes, I can narrow this to a 2–3 platform shortlist with pricing, privacy controls, group-size limits, and the specific configuration I'd use for a coaching practice.

Microsoft Teams makes particular sense if you already use Microsoft 365. Microsoft documents HIPAA-related compliance capabilities, and Teams supports E2EE for 1:1 calls; E2EE is also available for certain Teams meetings, although it doesn't encrypt every meeting feature such as chat and Q&A. support.microsoft.com support.microsoft.com support.microsoft.com

Google Meet is viable if your practice already lives in Google Workspace. Google currently lists Meet among the functionality covered by its HIPAA Business Associate Addendum, subject to the applicable Workspace agreement and configuration.

The important part isn't just the platform

For sensitive coaching data, I'd configure whichever platform you choose along these lines:

For an executive coach handling sensitive 1:1 conversations and confidential group sessions, you’ll usually want “HIPAA-like” controls even if you are not a HIPAA-covered entity. The key features are:

• Strong encryption
• Vendor privacy commitments/contractual protections (a BAA if you actually handle HIPAA-regulated data)
• Access controls and authentication
• Waiting rooms/lobbies
• No uncontrolled recordings or transcripts
• Audit logs and admin controls
• Secure file sharing and storage

A few platforms that are commonly considered suitable:

Fit Small Business unnus## My shortlist for an executive coach

Best overall for most coaches: Zoom (properly configured)

Good if you run:

• 1:1 executive sessions
• leadership cohorts
• confidential peer groups
• workshops with breakout rooms

Recommended settings:

• Require passcodes
• Enable waiting rooms
• Restrict screen sharing
• Disable automatic cloud recording
• Control transcript/AI summary features
• Use a dedicated business account

Best if you already live in Microsoft 365: Teams

A strong choice if your workflow includes:

• Outlook scheduling
• OneDrive/SharePoint documents
• corporate clients with strict IT requirements

Microsoft documents Teams security and compliance capabilities for regulated industries, including HIPAA-related compliance support when configured appropriately. Microsoft Support

Best “privacy-first coaching room” approach: doxy.me or similar healthcare-style tools

If your priority is “client enters a private room and talks,” rather than collaboration features, a healthcare-oriented platform can reduce configuration burden. unnus

Don’t overlook the non-video pieces

For executive coaching, the bigger privacy risks are often:

• Intake forms
• Coaching notes
• Assessments
• Personality tests
• Client recordings
• AI-generated summaries
• Email attachments
• Shared folders

A secure setup often looks like:

• Video: Zoom/Teams/Meet with locked-down settings
• Notes: encrypted document system with access controls
• Scheduling: secure calendar integration
• Storage: controlled client folders, no public links
• Client agreement: confidentiality + technology/privacy terms

If your clients include healthcare executives, founders, public figures, or regulated-industry leaders, I would lean toward Teams or Zoom with enterprise controls rather than a consumer video app. If you tell me your client mix (corporate executives vs private clients), whether you record sessions, and your country (US/EU/etc.), I can narrow this to a recommended stack.

Yes. For an executive-coaching practice handling highly sensitive personal or business information, I’d use a “HIPAA-like” standard even if HIPAA technically doesn’t apply to your coaching practice.

The key is not simply “encrypted video.” You want a platform that gives you a BAA or comparable contractual privacy commitment, encryption, access controls, auditability, secure messaging/file exchange, and strong administrative controls. A HIPAA label by itself isn't enough. Practice Better

My shortlist

zoom.com — Zoom supports HIPAA programs through a BAA and has substantial security/compliance controls. Importantly, you should use the appropriate Zoom configuration/plan rather than assuming an ordinary Zoom account has the same protections. Zoom Zoom

support.microsoft.com — particularly attractive if your clients are executives at companies already using Microsoft 365. Teams has enterprise security/compliance capabilities and supports additional controls for sensitive meetings, including restrictions around lobbies, presenters and recording. Microsoft Learn Microsoft Support

support.simplepractice.com — a stronger choice if you want the video calls to live alongside client records, secure messaging, documents, scheduling and other practice-management functions. SimplePractice says its BAA is incorporated into signup and that it is HIPAA compliant and HITRUST certified. SimplePractice Support SimplePractice Support

practicebetter.io — particularly interesting for an executive coach who runs ongoing programs rather than merely appointments. It combines secure client communication with programs, documents, scheduling and other client-engagement functions. Its current platform information says paid plans include a BAA and security controls. Practice Better Practice Better

What I'd choose for an executive coach

If video is your main requirement: I'd start with Zoom. It's familiar to executives, excellent for 1:1 and group sessions, and gives you a mature security/compliance ecosystem.

If your clients are mostly corporate executives: I'd seriously consider Microsoft Teams, especially if their organizations already use Microsoft 365. That can make authentication, guest access and corporate security policies considerably easier to manage.

If you want an actual private coaching practice platform: I'd investigate Practice Better first, with SimplePractice as another strong option.

One important distinction

“HIPAA-compliant platform” doesn't mean your entire coaching operation is HIPAA compliant. And if you aren't a HIPAA covered entity/business associate, HIPAA may not actually govern your coaching work.

For your purposes, I'd establish a stricter internal policy:

• Don't put sensitive coaching notes in ordinary email.
• Don't record sessions unless genuinely necessary.
• If recording, have an explicit consent/retention policy.
• Disable automatic transcription/AI summaries unless you've reviewed exactly how the vendor handles them.
• Use MFA everywhere.
• Require unique accounts rather than shared credentials.
• Use waiting rooms/lobbies and authenticated participants for groups.
• Restrict screen sharing and participant permissions.
• Have a defined retention/deletion schedule.
• Keep client files in an access-controlled encrypted system rather than Dropbox/Google Drive folders shared casually.
• Get the vendor's current BAA/DPA and security documentation in writing before putting sensitive client information into it.

For group coaching in particular, I'd pay special attention to participant privacy: a technically secure call doesn't prevent one participant from recording the screen, taking screenshots, or disclosing another participant's comments. Your client agreement should address that explicitly.

If you tell me (1) whether you record sessions, (2) whether you need a client portal/notes/scheduling, and (3) roughly how many 1:1 and group clients you have, I can narrow this to the best 2–3 setups for an executive-coaching practice, including approximate pricing and the privacy/security tradeoffs.

support.microsoft.com — particularly attractive if your clients are executives at companies already using Microsoft 365. Teams has enterprise security/compliance capabilities and supports additional controls for sensitive meetings, including restrictions around lobbies, presenters and recording. Microsoft Learn Microsoft Support

support.simplepractice.com — a stronger choice if you want the video calls to live alongside client records, secure messaging, documents, scheduling and other practice-management functions. SimplePractice says its BAA is incorporated into signup and that it is HIPAA compliant and HITRUST certified. SimplePractice Support SimplePractice Support

practicebetter.io — particularly interesting for an executive coach who runs ongoing programs rather than merely appointments. It combines secure client communication with programs, documents, scheduling and other client-engagement functions. Its current platform information says paid plans include a BAA and security controls. Practice Better Practice Better

What I'd choose for an executive coach

If video is your main requirement: I'd start with Zoom. It's familiar to executives, excellent for 1:1 and group sessions, and gives you a mature security/compliance ecosystem.

If your clients are mostly corporate executives: I'd seriously consider Microsoft Teams, especially if their organizations already use Microsoft 365. That can make authentication, guest access and corporate security policies considerably easier to manage.

If you want an actual private coaching practice platform: I'd investigate Practice Better first, with SimplePractice as another strong option.

One important distinction

“HIPAA-compliant platform” doesn't mean your entire coaching operation is HIPAA compliant. And if you aren't a HIPAA covered entity/business associate, HIPAA may not actually govern your coaching work.

For your purposes, I'd establish a stricter internal policy:

• Don't put sensitive coaching notes in ordinary email.
• Don't record sessions unless genuinely necessary.
• If recording, have an explicit consent/retention policy.
• Disable automatic transcription/AI summaries unless you've reviewed exactly how the vendor handles them.
• Use MFA everywhere.
• Require unique accounts rather than shared credentials.
• Use waiting rooms/lobbies and authenticated participants for groups.
• Restrict screen sharing and participant permissions.
• Have a defined retention/deletion schedule.
• Keep client files in an access-controlled encrypted system rather than Dropbox/Google Drive folders shared casually.
• Get the vendor's current BAA/DPA and security documentation in writing before putting sensitive client information into it.

For group coaching in particular, I'd pay special attention to participant privacy: a technically secure call doesn't prevent one participant from recording the screen, taking screenshots, or disclosing another participant's comments. Your client agreement should address that explicitly.

If you tell me (1) whether you record sessions, (2) whether you need a client portal/notes/scheduling, and (3) roughly how many 1:1 and group clients you have, I can narrow this to the best 2–3 setups for an executive-coaching practice, including approximate pricing and the privacy/security tradeoffs.

For an executive coach handling confidential 1:1 conversations and private group sessions, you’ll usually want “HIPAA-like” safeguards rather than HIPAA compliance itself (unless you are actually handling protected health information as a covered entity/business associate). The key features are:

• A vendor willing to sign a Business Associate Agreement (BAA) or equivalent privacy/security contract (if HIPAA obligations apply)
• Encryption in transit and at rest
• Strong admin controls
• Waiting rooms/admission controls
• No training AI models on client content
• Control over recordings, transcripts, and chat retention
• Audit logs and user management
• Secure file sharing (if you exchange documents)

A platform is not automatically “HIPAA-safe” because of the brand name; the plan, contract, and configuration matter. Medcurity HHS.gov

Strong options for executive coaching

HIPAA Vault Fit Small Business## My practical shortlist for an executive coach

Best overall: Zoom (configured properly)

Good if you run:

• Executive 1:1 coaching
• Leadership cohorts
• Group masterminds
• Workshops with breakout rooms

Recommended settings:

• Waiting room ON
• Require passcodes
• Disable “join before host”
• Limit screen sharing to host/co-host
• Disable cloud recordings unless you have a clear retention policy
• Review AI transcription/summary settings before enabling them

Best if clients are corporate executives: Microsoft Teams

If your clients already live in Microsoft 365, Teams can feel more enterprise-native:

• Better identity controls
• Easier integration with corporate environments
• Stronger governance options

Best privacy-oriented solo practice setup: doxy.me or a dedicated telehealth-style platform

If your priority is “I want the fewest things to configure,” a specialized platform may be attractive. However, for executive coaching groups, it may feel less polished than Zoom/Teams.

Don’t overlook the non-video data

Many coaches focus on the call platform but forget:

• Intake forms
• Coaching notes
• Assessments
• Session recordings
• AI-generated summaries
• Email attachments
• Client portals

For a “HIPAA-like” posture, consider:

• A secure client management system
• Encrypted cloud storage
• MFA everywhere
• Separate work account (not personal Gmail/iCloud)
• A written privacy policy explaining retention and recordings

A setup I’d consider for a high-end executive coach

• Video: Zoom paid plan or Microsoft Teams
• Scheduling: secure calendar integration
• Documents: Microsoft 365 or Google Workspace business account
• Notes: encrypted coaching CRM or secure document system
• Passwords: password manager + MFA
• Recordings: opt-in only, with defined deletion dates

If you tell me:

1. whether you record sessions,
2. whether you run groups larger than ~10 people, and
3. whether your clients are mostly corporate-sponsored executives or private-pay individuals,

I can narrow this to 2–3 best-fit stacks.

1. whether you record sessions,
2. whether you run groups larger than ~10 people, and
3. whether your clients are mostly corporate-sponsored executives or private-pay individuals,

I can narrow this to 2–3 best-fit stacks.

For an executive coach handling confidential client discussions, you probably do not need HIPAA compliance unless you are handling protected health information (PHI) or working as a HIPAA business associate, but a “HIPAA-like” privacy posture is a sensible standard: strong access controls, encryption, contractual privacy commitments, auditability, secure storage, and careful handling of recordings/transcripts. Medcurity

The best fit depends on whether you need premium 1:1 coaching, secure cohorts/mastermind groups, recordings, AI notes, and client portals.

Strong options for sensitive executive coaching

My shortlist for an executive coach

Best overall: Zoom Business/Enterprise

A strong default if your work is:

• weekly 1:1 executive sessions
• leadership cohorts
• confidential group discussions
• occasional screen sharing and workshops

Configure it with:

• unique meeting IDs
• waiting rooms
• participant authentication where appropriate
• no automatic cloud recordings unless you have a clear retention policy
• restricted AI summaries/transcription unless explicitly approved by clients

Best if you already live in Microsoft 365: Teams

Choose this if you want:

• secure client files in one ecosystem
• enterprise identity controls
• integrated calendar/email/document workflows

Teams also supports additional encryption options for sensitive meetings, though some features have limitations depending on meeting type and configuration. Microsoft Learn

Best “privacy-first” coaching stack

A common setup for a solo executive coach:

• Video: Zoom Business or Teams
• Scheduling: Calendly paid plan with privacy settings configured
• Client documents: Microsoft OneDrive or Google Drive under a business workspace
• Client notes: encrypted coaching CRM or a business-grade workspace, not personal notes apps
• Password/security: password manager + MFA everywhere

Questions to ask any vendor before adopting it

1. Will you sign a BAA (if needed)?
2. Where are recordings, transcripts, and AI summaries stored?
3. Can I disable recording and AI processing by default?
4. Do you provide audit logs?
5. Can I enforce MFA and access policies?
6. Can clients join without creating accounts?
7. What happens when I delete a client record?

One important distinction: a platform being “encrypted” does not automatically make it appropriate for confidential professional use. The privacy outcome usually depends on the plan, contract terms, account configuration, and your own operating policies. Medcurity

If you tell me your setup (solo coach vs. coaching firm, number of clients, whether you record sessions, and whether you need a client portal), I can narrow this to a 2–3 platform recommendation.

Yes. If by “HIPAA-like” you mean strong confidentiality, contractual privacy commitments, encryption, access controls, auditability, and a provider willing to sign a BAA, there are several good options.

One important distinction: HIPAA compliance is about the way you use the platform, not just the platform itself. Also, as an executive coach, you generally aren't automatically subject to HIPAA merely because conversations are sensitive. If you serve healthcare organizations or handle actual PHI on behalf of a covered entity, the analysis changes.

My shortlist

1. zoom.com — my default recommendation

Zoom is probably the easiest fit for an independent executive coach who needs private 1:1 sessions and secure group calls. Zoom offers a BAA, and its healthcare configuration includes security controls appropriate for sensitive information. Zoom Zoom

For your use case, I'd configure it with:

• Waiting room enabled
• Passcode-required meetings
• Host-only screen sharing
• Authenticated users where practical
• No automatic cloud recording
• Restricted recording/download permissions
• Disable unnecessary AI/transcription features
• Separate meeting links for recurring groups rather than one permanent public link
• Strong admin/account security and MFA

Zoom specifically says customers with a BAA can use its AI features with administrative controls, but I'd disable AI/transcription by default for coaching conversations unless there's a compelling reason to use them. Zoom

2. microsoft.com — excellent for executive/corporate coaching

Teams is particularly attractive if your clients already use Microsoft 365. Microsoft says Teams supports HIPAA and other industry compliance frameworks, and Microsoft's Office 365 BAA covers the applicable services when you have the agreement in place. Microsoft Learn Microsoft Support

The advantage isn't just video: you can build a more controlled environment around calendar, files, chat, identity, permissions, retention and auditing.

For a coach working with executives at larger companies, I'd seriously consider Teams over Zoom if the clients' organizations already mandate Microsoft 365.

3. workspace.google.com + Meet

Google is also a legitimate option. Google currently lists Google Meet, Gmail, Calendar, Drive, Docs, Chat and other Workspace services as HIPAA Included Functionality, provided the appropriate Business Associate Amendment is accepted and the service is configured appropriately. Google Workspace Help Google Workspace

It's especially attractive if your practice already runs on Gmail/Calendar/Drive.

One nuance: don't confuse Google's new Meet 1:1/group calling with the broader managed Google Workspace meeting environment. Google describes the newer Meet calling experience as end-to-end encrypted, while Workspace meeting data has its own encryption, administrative and compliance controls. Google Help

What I'd choose for an executive-coaching practice

If you're a solo/small practice:
Zoom paid + BAA + locked-down settings is probably the simplest answer.

If most clients are executives inside large companies:
Microsoft Teams becomes very compelling because their employer may already have identity, security and retention controls around it.

If you're already deeply invested in Google Workspace:
Google Meet + Workspace + BAA is perfectly reasonable.

The bigger issue, though, is everything surrounding the call. A beautifully secured Zoom meeting doesn't help much if your client notes are sitting in an ordinary notes app, recordings are automatically transcribed by an AI service, or coaching documents are shared through an uncontrolled personal Dropbox.

For a genuinely “HIPAA-like” practice, I'd establish a policy around video + email + notes + scheduling + payments + recordings + AI/transcription + file storage, not just the video platform.

If you tell me whether you're solo vs. have a team, whether you record sessions, and whether you actually handle PHI or just highly confidential executive information, I can give you a concrete privacy stack (video + email + notes + scheduling + storage) with the lowest-complexity setup.

For an executive coach, “HIPAA-like” usually means you want healthcare-grade privacy practices even if you are not legally subject to HIPAA. The key capabilities are:

• Strong encryption
• Signed contractual privacy commitments (a HIPAA BAA if you want the closest analogy)
• No accidental recording/transcription storage
• Access controls and authentication
• Waiting rooms/lobbies for groups
• Audit logs where possible
• Clear data retention policies

A platform is not automatically “secure” just because it is a well-known brand; the plan level, contract terms, and configuration matter. Medcurity

Strong options for 1:1 coaching + secure groups

HIPAA Vault Fit Small Business## My shortlist by coaching style

Executive coaching with executives from companies

Choose:

1. Microsoft Teams if clients already use Microsoft 365.
2. Zoom paid business/enterprise if you need polished group experiences and easy client adoption.

High-trust 1:1 coaching (C-suite, founders, confidential leadership work)

Choose:

• Zoom paid plan with strict settings, or
• Microsoft Teams with strong account controls

Cohorts, masterminds, leadership groups

Prioritize:

• Waiting room/lobby
• Participant authentication
• No public links
• Ability to remove participants
• Disable participant recording
• Control screen sharing and chat

Zoom and Teams are usually stronger here than healthcare-specific tools because they were designed for larger collaborative meetings. Fit Small Business

Security configuration checklist

Regardless of platform:

• Use a business account owned by your practice (not a personal account).
• Require meeting passwords or authenticated access.
• Enable waiting rooms/lobbies.
• Disable cloud recording by default.
• If you record, define: - where recordings are stored,
• who can access them,
• when they are deleted.
• Avoid AI meeting summaries/transcription unless you have verified how the data is processed and protected. AI features can introduce additional data-handling vendors. MeetOye
• Use separate meeting links for different clients/groups.
• Have a client confidentiality agreement covering virtual sessions.

A practical “premium coach” stack

A common setup would be:

• Video: Zoom paid business/enterprise or Microsoft Teams
• Scheduling: a business scheduling tool with privacy controls
• Documents: encrypted business cloud storage (Google Workspace or Microsoft 365)
• Notes: encrypted client-management system or secure document system
• Password management: business password manager with MFA

If your clients include healthcare executives, therapists, attorneys, or people discussing regulated information, I would lean toward a platform that can provide a BAA-like agreement and document your privacy practices, even if you are not technically a HIPAA-covered provider. Medcurity

I can also help you compare Zoom vs Teams vs Google Workspace specifically for a solo executive coach, including cost, client experience, scheduling, notes, and confidentiality workflow.

For an executive coach, the goal is usually “HIPAA-like” privacy rather than HIPAA compliance (unless you are handling protected health information as a covered entity/business associate). You’ll want platforms that support:

• Strong encryption
• A signed Business Associate Agreement (BAA) if you ever handle health-related information
• Access controls and authentication
• Waiting rooms / participant controls for groups
• No accidental recording or transcript storage
• Secure file sharing and client notes
• Audit logs where possible

A signed BAA is a key distinction: encryption alone does not make a platform appropriate for HIPAA-regulated workflows. HHS.gov

Strong options for a 1:1 executive coaching practice

zoom.com (with the appropriate healthcare/security configuration)

Best for: polished client experience, executive audiences, group coaching.

Pros:

• Excellent video quality and familiarity among executives
• Waiting rooms, passcodes, participant controls
• Good for workshops and cohorts
• Healthcare-specific offerings exist that support BAA arrangements for HIPAA use cases HHS.gov

Watch-outs:

• Standard consumer Zoom accounts are not the same as a HIPAA-ready configuration.
• Disable cloud recording, AI summaries, transcripts, and integrations unless you have reviewed the data flow.

microsoft.com

Best for: coaches already using Microsoft 365.

Pros:

• Strong enterprise identity/security ecosystem
• Works well with corporate clients
• Integrates with Microsoft compliance tools
• Microsoft supports HIPAA compliance configurations for eligible environments. Microsoft Support

Watch-outs:

• More complex than a dedicated coaching platform.
• Requires proper tenant configuration and agreements; it is not simply “turn on Teams and you’re compliant.” Microsoft Learn

workspace.google.com (through Google Workspace)

Best for: coaches already living in Google Workspace.

Pros:

• Easy client access
• Strong account security options
• Convenient with Calendar and Drive

Watch-outs:

• Use a managed Workspace account, not a personal Gmail setup, if handling sensitive information.

More privacy-focused / coaching-adjacent options

doxy.me

Best for: simple private 1:1 sessions.

Pros:

• Designed for healthcare-style private sessions
• Browser-based (low friction)
• Privacy-focused workflow; it states that it does not record video/audio calls or save chat messages. Doxy.me Help Center

Watch-outs:

• Less ideal for executive group programs, workshops, breakout rooms, and corporate collaboration.

vsee.com

Best for: healthcare-grade privacy needs and customized workflows.

Pros:

• Long history in telehealth
• Supports secure video workflows and BAA arrangements. HHS.gov

Watch-outs:

• May feel less familiar to executive clients than Zoom or Teams.

My shortlist for an executive coach

Security practices matter as much as the platform

For a coaching practice handling sensitive personal information, I’d also recommend:

• Require MFA on your account
• Use unique meeting links per client/group
• Enable waiting rooms
• Lock meetings after participants join
• Avoid recording by default
• Turn off AI meeting summaries unless explicitly approved
• Store notes in a secure client-management system, not meeting chat
• Have a written privacy policy and client confidentiality agreement
• Use encrypted storage for client documents

If your clients are C-suite executives, founders, or corporate-sponsored leaders, I’d generally lean toward Zoom + a secure client portal or Microsoft Teams + Microsoft 365 security controls rather than a healthcare-only video tool. You’ll get the privacy posture without making the client experience feel clinical.

For a coaching practice handling sensitive personal information, I’d also recommend:

• Require MFA on your account
• Use unique meeting links per client/group
• Enable waiting rooms
• Lock meetings after participants join
• Avoid recording by default
• Turn off AI meeting summaries unless explicitly approved
• Store notes in a secure client-management system, not meeting chat
• Have a written privacy policy and client confidentiality agreement
• Use encrypted storage for client documents

If your clients are C-suite executives, founders, or corporate-sponsored leaders, I’d generally lean toward Zoom + a secure client portal or Microsoft Teams + Microsoft 365 security controls rather than a healthcare-only video tool. You’ll get the privacy posture without making the client experience feel clinical.

For an executive coach handling highly sensitive client information, I’d look for platforms that provide healthcare-grade controls, even if your work is not technically subject to HIPAA. The key features are:

• A Business Associate Agreement (BAA) or equivalent contractual privacy commitment (if you want HIPAA-like assurance)
• Strong encryption
• Waiting rooms / admission controls
• Meeting locks and participant authentication
• No automatic recording or transcription unless explicitly enabled
• Administrative controls and audit logs
• Secure file storage if you exchange documents

A BAA matters because encryption alone does not make a platform suitable for handling regulated sensitive data. Curogram HHS.gov

Strong options for 1:1 coaching and private groups

HipaaKit Fit Small Business## My shortlist for an executive coach

Best overall: Zoom with a privacy-focused setup

Good balance of:

• Executive-client familiarity
• Breakout rooms for group coaching
• Waiting rooms
• Registration controls
• Host-only recording controls
• Easy external participation

For sensitive work, I’d disable:

• Automatic cloud recording
• Automatic transcripts
• AI meeting summaries unless explicitly approved
• Participant-to-participant file sharing

Zoom### Best if your clients are executives at large companies: Microsoft Teams

Many corporate clients already have Teams approved by their IT/security teams. It can reduce friction when working with enterprise leaders, especially if sessions involve documents or collaboration. HIPAA Vault

Best lightweight private practice feel: doxy.me

If your work is mostly confidential 1:1 conversations and you want a healthcare-inspired workflow, it is worth considering. It is less ideal for leadership cohorts or group programs. HipaaKit

Also secure the “around the call” data

The video platform is only one piece. For a HIPAA-like posture, consider:

• Client notes: Use an encrypted notes system rather than ordinary documents with sensitive details.
• Email: Avoid putting sensitive coaching notes in plain email.
• Scheduling: Choose a scheduler that does not expose client names, topics, or intake details unnecessarily.
• Storage: Use access-controlled cloud storage with MFA.
• Contracts: Include confidentiality terms and explain whether sessions are recorded.

A practical stack for a solo executive coach

A strong setup could be:

• Video: Zoom or Teams
• Calendar/email/docs: Google Workspace or Microsoft 365
• Password manager: a business password manager with MFA enforcement
• Notes: encrypted or access-controlled coaching CRM/notes tool
• File sharing: controlled client folders with expiration where possible

One important distinction: “HIPAA compliant” is not a certification you can simply buy from a vendor. For a coach, the goal is usually a documented privacy program with appropriate vendors and settings, not just choosing a logo that says “HIPAA.” HHS.gov

If you tell me:

1. whether your clients are executives only or also healthcare/therapy-adjacent,
2. typical group size (5, 20, 100+), and
3. whether you need recordings/transcripts,

I can narrow this to a recommended stack.

For an executive coach handling confidential 1:1 conversations and private group sessions, I’d look for platforms that offer HIPAA-style safeguards even if you are not legally a HIPAA-covered provider. The important features are:

• Business Associate Agreement (BAA) or equivalent privacy agreement if client health-related information may appear
• Encryption in transit and at rest
• Strong access controls (MFA, admin controls, participant authentication)
• Waiting rooms / admission controls
• No automatic recording or AI transcription unless explicitly enabled
• Secure storage for notes, files, and recordings
• Audit logs where possible HipaaKit

Here are the platforms I would shortlist:

My practical recommendations for an executive coach

If you do mostly 1:1 executive coaching

Choose:

1. Zoom with business-grade security settings
2. Microsoft Teams if your clients are corporate executives already using Microsoft 365
3. doxy.me or VSee if your coaching frequently touches mental health, burnout, trauma, wellness, or other sensitive topics

If you run confidential group cohorts

I would favor:

1. Zoom — best participant controls (waiting room, remove participant, mute controls, breakout rooms)
2. Teams — best for corporate-sponsored cohorts
3. Webex — best when serving highly regulated enterprises

Settings I would enable regardless of platform

• Require meeting passwords or authenticated access
• Enable waiting rooms/lobbies
• Disable participant recording
• Disable automatic cloud recording by default
• Review AI transcription/summarization settings carefully
• Remove old recordings or store them in a controlled system
• Use a separate business account (not a personal/free account)
• Use MFA on your admin account
• Have a written client privacy policy explaining what is and is not recorded

One nuance: HIPAA compliance is not just a platform choice. A secure platform can help, but your configuration, contracts, storage practices, and handling of client notes determine the overall privacy posture. Curogram

If you tell me whether your clients are mostly corporate executives, private individuals, or healthcare-adjacent (physicians/therapists/wellness) and whether you need recordings, transcripts, scheduling, or a client portal, I can narrow this to a 2–3 platform stack.

Yes. If by “HIPAA-like privacy” you mean strong confidentiality, encryption, access controls, minimal data retention, and a contractual commitment from the vendor, there are several good choices.

One important distinction: HIPAA compliance itself may not apply to an executive coach unless you're handling PHI in a HIPAA-covered relationship. But using a HIPAA-capable platform is a sensible privacy benchmark.

My shortlist

HHS specifically identifies vendors such as Microsoft Teams, VSee, Zoom for Healthcare and Doxy.me as examples of video vendors that can enter into BAAs, while emphasizing that the customer still has to configure and use the technology appropriately. HHS.gov HHS.gov

1. Zoom — probably my first choice

For an executive-coaching practice, Zoom is probably the easiest balance of privacy, client usability, and sophisticated group-call controls.

I'd configure it with:

• Waiting room
• Passcode
• Authenticated hosts
• Disable participants' ability to rename themselves if appropriate
• Disable file transfer if you don't need it
• Restrict screen sharing to host
• No automatic cloud recording
• Carefully control local/cloud recordings
• Disable AI/transcription features unless explicitly needed and contractually appropriate
• Use end-to-end encryption when the functionality you need is compatible with it

Zoom has HIPAA-capable offerings and BAA arrangements, but don't assume an ordinary/free Zoom account is equivalent. NCDA Curogram

zoom.com

2. Microsoft Teams — excellent if you're already in Microsoft 365

Teams is particularly attractive if you already use Microsoft 365 for email, documents and identity management. You can build a much broader secure environment around it rather than treating video conferencing as an isolated application.

Microsoft says Teams can be configured for HIPAA use with appropriate Microsoft 365 licensing and a BAA; consumer/personal Teams shouldn't be treated the same way. Microsoft Learn

microsoft.com

3. Webex — worth considering for a security-first practice

Cisco Webex is a strong alternative if your clients include executives at larger companies with stringent security requirements. It has enterprise security/compliance capabilities and paid offerings that can support HIPAA use. HIPAA Vault Fit Small Business

webex.com

4. Google Meet — convenient, particularly for Google Workspace users

If your practice already runs on Google Workspace, Meet can be a very practical choice. The important part is using the appropriate paid Workspace arrangement and accepting the relevant BAA, rather than relying on a personal Google account.

workspace.google.com

What I'd choose for an executive coach

For most solo/independent executive coaches: Zoom + a secure document/email ecosystem would be my default.

The bigger privacy issue isn't actually the video call. It's the data surrounding it:

• Intake forms
• Coaching notes
• Session recordings
• AI transcripts
• Email
• Calendaring
• Payment information
• Shared documents
• Client contact information
• Group-participant lists

For example, you could have an extremely secure Zoom meeting but then upload the transcript to an ordinary AI service. From a client-confidentiality standpoint, you've potentially just undermined the entire setup.

A practical “HIPAA-like” standard

I'd require every vendor that touches sensitive coaching information to satisfy as many of these as possible:

1. Written BAA/DPA or equivalent contractual privacy commitment
2. Encryption in transit and at rest
3. Strong account authentication, ideally MFA
4. Administrative access controls
5. Audit logs
6. Configurable retention/deletion
7. No training AI models on client content
8. Ability to disable recording/transcription
9. Controlled meeting admission/waiting rooms
10. Clear breach-notification obligations
11. Enterprise privacy/security documentation
12. A way to export/delete client data

And I'd do a documented risk assessment rather than relying on the words “HIPAA compliant” in a marketing page. HHS explicitly notes that compliance depends on the contractual arrangement, safeguards and your own risk analysis—not simply the name of the technology. HHS.gov HHS.gov

If you tell me whether you're a solo coach or have a coaching firm, and whether you need recordings/transcripts, intake forms, scheduling, and secure messaging, I can narrow this down to a 2–3 platform stack rather than just a video-call recommendation.

Cisco Webex is a strong alternative if your clients include executives at larger companies with stringent security requirements. It has enterprise security/compliance capabilities and paid offerings that can support HIPAA use. hipaavault.com fitsmallbusiness.com

webex.com

4. Google Meet — convenient, particularly for Google Workspace users

If your practice already runs on Google Workspace, Meet can be a very practical choice. The important part is using the appropriate paid Workspace arrangement and accepting the relevant BAA, rather than relying on a personal Google account.

Yes. For an executive-coaching practice, I’d treat “HIPAA-like” as a security/privacy standard rather than assuming HIPAA legally applies to coaching. The strongest choices are platforms that offer a BAA, strong access controls, encryption, administrative controls, and clear handling of recordings/transcripts.

My shortlist

1. Zoom — probably my first choice

zoom.com

Zoom can execute a Business Associate Agreement (BAA) and has a specific healthcare compliance program. Its current documentation also says that customers with a BAA can use certain AI features while retaining administrative controls, and that Zoom does not use customer communications such as audio, video, chat, screen sharing, or attachments to train its or third-party AI models. Zoom Zoom

For an executive coach, I'd configure it conservatively:

• Require authenticated users where practical.
• Use waiting rooms/passcodes.
• Don't publish meeting links publicly.
• Disable participant recording unless explicitly needed.
• Be particularly careful with AI summaries, transcripts, and cloud recordings.
• Establish a defined retention/deletion policy.
• Use separate client/group meeting links rather than one permanent personal room.

Why I like it: it's mature, easy for clients to join, and gives you a good combination of privacy controls and low client friction.

2. Microsoft Teams — excellent if you want an entire secure practice stack

learn.microsoft.com

Microsoft offers a HIPAA BAA covering in-scope Microsoft 365 services, including Teams. Microsoft explicitly cautions that signing the BAA doesn't itself make your organization HIPAA compliant—you still need appropriate policies, configuration, and processes. Microsoft Learn

Teams has an interesting advantage for particularly sensitive 1:1 conversations: it supports end-to-end encryption (E2EE) for one-to-one calls. Microsoft also supports E2EE for meetings, although some features—including recording, transcription/captions and several collaboration features—become unavailable when E2EE is enabled. Microsoft Support Microsoft Learn

I'd choose Teams if you also want:

• Secure client documents in OneDrive/SharePoint
• Microsoft 365 email/calendar
• Centralized identity and MFA
• More sophisticated organizational security controls
• A single system for coaching + administrative work

3. Google Meet — compelling if you're already a Google Workspace shop

Google's current HIPAA documentation lists Google Meet, Gmail, Calendar, Drive, Docs, Sheets, and other Workspace services as covered functionality under its HIPAA Business Associate Addendum. Google Workspace

So if your practice already runs on Google Workspace, you can potentially create a fairly cohesive secure environment rather than adding another vendor.

What I'd actually choose

For a solo/small executive-coaching practice, I'd rank them:

1. Zoom — easiest combination of professional client experience + privacy/security controls.
2. Microsoft Teams — best if sensitive client information extends into documents, email, calendars, and a broader Microsoft 365 environment.
3. Google Meet/Workspace — excellent if you're already deeply invested in Google.

One important distinction: a platform being HIPAA-capable isn't the same as your coaching practice being HIPAA compliant. A BAA, for example, doesn't magically make your policies, devices, storage, client intake, recordings, or data-retention practices compliant. Microsoft makes this distinction explicitly. Microsoft Learn

For your use case, I'd also establish a simple “no unnecessary client data in the video platform” policy: don't put sensitive coaching notes in meeting chat, turn off automatic recording/transcription unless there is a compelling reason, use MFA, and keep actual coaching records in a separately secured system.

If you tell me (1) solo vs. team practice, (2) Zoom/Google/Microsoft ecosystem you're already using, and (3) whether you record sessions or use AI transcription, I can narrow this to a specific setup and plan level.

Yes. For an executive-coaching practice, I’d distinguish “HIPAA-capable” from actually HIPAA-compliant. HIPAA itself applies only in particular healthcare contexts, but if your goal is HIPAA-like privacy for highly sensitive coaching conversations, choosing a platform that offers a BAA, strong access controls, encryption, audit/compliance tooling, and administrative controls is a sensible benchmark.

My shortlist

Zoom would probably be my recommendation for an independent executive coach. Zoom explicitly supports HIPAA programs through a BAA and provides encryption and meeting-access controls such as waiting rooms and passcodes. Importantly, Zoom says there is no official “HIPAA certification”; the BAA and your own configuration/processes are what matter. Zoom Zoom

Microsoft Teams is particularly attractive if you already use Microsoft 365 for email, calendars, OneDrive, and documents. Microsoft provides a HIPAA BAA covering in-scope services, while explicitly noting that the BAA alone doesn't make your organization HIPAA compliant—you remain responsible for configuration and procedures. Microsoft Learn Microsoft Support

Webex is another credible choice for a security-heavy practice; Cisco says Webex can be used in healthcare environments consistent with customers' HIPAA compliance needs and maintains ISO 27001 certification. Webex Help Center

What I'd configure for coaching

Regardless of platform, I'd make these defaults:

• Paid business/enterprise tier, not a free consumer account.
• Signed BAA/DPA where appropriate—especially if you actually handle PHI.
• Waiting room/lobby enabled.
• Passcode + unique meeting ID rather than a persistent personal meeting room.
• Host-only screen sharing by default.
• No automatic recording.
• No automatic transcription or AI meeting assistant unless you've specifically assessed its privacy/data-retention implications.
• Participant authentication where practical.
• Lock meetings once everyone has joined.
• MFA on your coach/admin accounts.
• Keep client notes and sensitive documents in a separate appropriately secured system, rather than putting everything into the video platform's chat/recording/transcription features.
• Establish a written retention/deletion policy for recordings, transcripts, chat, and client documents.

One particularly important point: end-to-end encryption isn't necessarily the same thing as the best overall privacy configuration. Some E2EE modes can disable useful features such as recording or certain collaboration functions. For executive coaching, I'd prioritize the whole security architecture and your operational controls rather than choosing solely based on an “E2EE” badge.

If I were setting up your practice

I'd choose:

Zoom + a secure client-management/document system + encrypted business email + MFA, with recordings/transcripts/AI disabled by default.

If your practice already runs heavily on Microsoft 365, I'd instead choose Teams + Microsoft 365, because keeping identity, calendar, files, access control, and meetings within one managed ecosystem can substantially simplify administration.

Also, don't market yourself as “HIPAA compliant” merely because your video platform offers a BAA. Zoom itself emphasizes that compliance is a shared responsibility. Zoom Microsoft Learn

If you tell me (1) whether you're a solo coach or have a team, (2) whether you need group programs of 10, 50, 100+ people, and (3) whether you already use Google Workspace or Microsoft 365, I can narrow this to the 2–3 best setups and approximate cost for your practice.

Yes. If your goal is “HIPAA-like” privacy for executive coaching—even when HIPAA technically doesn’t apply to your coaching practice—I’d choose a platform that gives you a signed Business Associate Agreement (BAA), strong access controls, encryption, and control over recordings/transcripts.

One important distinction: HIPAA compliance is not simply a feature of a video platform. It depends on the plan, contract/BAA, configuration, and how you handle the resulting data. HHS.gov Medcurity

My shortlist

1. Zoom — probably my first choice

zoom.com

For an independent executive coach, I'd lean toward Zoom because it's familiar to executives, handles 1:1 and fairly large group sessions, and has a relatively mature set of privacy controls.

Zoom currently says it will enter into a BAA with customers on qualifying paid plans, including Pro, Business, Business Plus and Enterprise arrangements. Zoom Zoom

For your use case, I'd configure it roughly like this:

• Require a passcode.
• Use a unique meeting ID rather than your permanent personal meeting room for sensitive sessions.
• Enable the waiting room.
• Restrict screen sharing to the host unless needed.
• Disable recording by default.
• Be extremely cautious with AI transcription/summaries.
• Don't allow participants to save/share meeting chats or files unless there's a reason.
• Require MFA on your account.
• Keep client documents out of the meeting platform unless you have deliberately chosen it as your secure document repository.

Zoom's BAA documentation also specifically notes that its AI features are subject to controls when a BAA is in place. Zoom

2. Microsoft Teams — excellent for executive clients

If your clients are predominantly corporate executives, Teams may actually be the more natural choice.

Microsoft supports HIPAA compliance through eligible Microsoft 365 environments and a BAA, although configuration matters. Microsoft Learn

The big advantage is that Teams can fit into a broader Microsoft 365 security environment: identity management, MFA, permissions, retention policies, auditing, SharePoint/OneDrive, etc.

I'd choose Teams over Zoom if your own practice already runs on Microsoft 365 and you want one security ecosystem rather than another standalone service.

3. Google Meet — particularly attractive for Google Workspace users

Google's current HIPAA functionality documentation explicitly includes Google Meet, Drive, Gmail, Calendar, Chat and other Workspace services under its HIPAA Business Associate Addendum. Google Workspace

That makes it compelling if you're already running your coaching business on Google Workspace.

The catch is that you should treat the entire Workspace environment, not just Meet, as part of your privacy architecture. For example, don't casually put sensitive coaching notes into an ordinary Google Doc shared with the client.

4. Doxy.me — strongest “healthcare privacy” orientation

If your priority is privacy rather than executive-coaching polish, Doxy.me is worth considering. It's designed specifically around telehealth and has features such as provider waiting rooms and controlled patient access. Current comparisons indicate that it offers a BAA path. unnus Medcurity

The downside is psychological/UX: an executive client may find a healthcare-style experience less natural than clicking a familiar Zoom or Teams invitation.

5. Vibly — worth looking at for coaching specifically

vibly.io

This one is interesting because it's designed around coaching rather than healthcare generally. Vibly says its platform combines video with client records, scheduling, notes, chat and session documentation, and offers HIPAA-oriented functionality. Vibly

If you want something closer to “secure coaching practice management + video” rather than simply a secure video-conferencing app, I'd investigate it.

What I'd do in your position

For an independent executive coach, I'd narrow it to:

Best overall: Zoom + a proper BAA + locked-down settings.

Best corporate/executive environment: Microsoft Teams + Microsoft 365.

Best Google ecosystem: Google Meet + managed Google Workspace.

Best purpose-built privacy/healthcare approach: Doxy.me.

Best coaching-specific all-in-one: Vibly.

And I would not assume that “encrypted” means “HIPAA-like.” A free Zoom/Teams/Meet account can have excellent encryption and still lack the contractual and administrative protections you want. HHS specifically emphasizes the importance of a BAA when a cloud provider handles ePHI. HHS.gov

One thing I'd pay particular attention to: AI

For executive coaching, transcripts, AI meeting summaries, recordings, uploaded documents, and searchable meeting history may be more sensitive than the video call itself.

If a client tells you about an impending acquisition, board conflict, executive termination, mental-health concern, family issue, or other highly sensitive matter, you don't necessarily want that information automatically turned into a permanent AI transcript sitting in your account.

So I'd make your default policy:

No recording, no transcription, no AI notes, and no automated meeting summaries unless the client explicitly agrees.

That's a stronger privacy posture than simply choosing a platform advertised as “HIPAA compliant.”

If you tell me (1) how many clients you have, (2) typical group size, (3) whether you use Google Workspace or Microsoft 365, and (4) whether you need scheduling, payments, notes, and client records too, I can narrow this to a specific 2–3 platform stack rather than just video-conferencing options.

For an executive coach handling confidential 1:1 conversations and private group sessions, I’d look for platforms that provide HIPAA-style controls (even if your coaching practice is not legally subject to HIPAA). The key features are:

• A Business Associate Agreement (BAA) or equivalent contractual privacy commitment (if you need HIPAA-level handling)
• Encryption in transit and at rest
• Strong account controls (MFA, role permissions)
• Waiting rooms/admission controls for groups
• No training of AI models on your client content
• Control over recordings, transcripts, chat retention, and file sharing
• Audit logs where possible

A few strong options:

My shortlist for an executive coach

Best overall for most executive coaches:
zoom.com on a paid business-grade plan, configured with:

• Waiting room enabled
• Unique meeting IDs
• Passcodes
• MFA
• Cloud recording disabled unless you have a secure workflow
• AI summaries/transcription disabled unless explicitly approved and covered by your privacy policy

Best if you already run your business on Microsoft:
microsoft.com because identity management, file storage, and access policies can be managed together. Microsoft Support

Best “therapy-clinic style” privacy model for 1:1 coaching:
doxy.me if you prioritize a simple private client room over a premium group-coaching experience. Medcurity

Also secure the non-video side

Many privacy failures happen outside the call. Consider:

• A client portal instead of email attachments
• Encrypted document storage
• Separate client records from marketing/CRM systems
• A written confidentiality policy
• Explicit consent before recording sessions
• A data retention/deletion schedule

For a coaching practice, a common “high privacy” stack would be:

• Video: Zoom or Teams
• Scheduling: a privacy-conscious scheduling tool
• Documents: managed cloud storage with access controls
• Notes: encrypted client-management system or secure practice platform

If you coach executives at large companies, I’d optimize for enterprise trust and IT approval. If you coach private individuals, I’d optimize for ease of use plus strong privacy controls.

Yes. For an executive-coaching practice, I’d look for HIPAA-capable infrastructure rather than simply a platform that advertises “secure video.” Even if HIPAA technically doesn’t apply to your coaching business, a HIPAA-like setup gives you a useful privacy baseline.

My shortlist

Zoom is probably the sweet spot for an executive coach. Zoom explicitly supports HIPAA programs through a BAA and provides security controls such as waiting rooms, passcodes and meeting-management controls. Zoom Zoom

zoom.com

Microsoft Teams is particularly attractive if your practice already uses Microsoft 365. Microsoft provides a HIPAA Business Associate Agreement covering in-scope services, while emphasizing that signing the BAA doesn't by itself make your organization HIPAA compliant. Microsoft Learn

learn.microsoft.com

Doxy.me is worth considering if you want something designed around sensitive client/healthcare conversations rather than a general-purpose collaboration suite. It offers BAAs and group calling, and says it doesn't record or retain video/audio calls. Doxy.me Help Center Doxy.me

doxy.me

What I'd choose for your practice

I'd probably use Zoom with a BAA and a locked-down configuration:

• Unique meeting links rather than a permanent public meeting room
• Waiting room enabled
• Passcode required
• Only host can admit participants
• Disable participants' ability to record
• Disable cloud recording unless there's a specific business reason
• Be very cautious with AI transcription, meeting summaries and other AI features
• Don't put sensitive coaching notes into meeting titles, invitations or chat
• Use a separate secure system for client records/notes rather than treating Zoom as your client-record system
• Require MFA on your account
• Have a written retention/deletion policy

One important distinction: “HIPAA-compliant platform” doesn't mean your coaching practice automatically becomes HIPAA compliant. HIPAA compliance involves your policies, access controls, contracts, data handling, retention, devices, vendors, etc. Microsoft explicitly makes this point, and Zoom similarly describes its BAA as supporting a customer's compliance program rather than providing a certification. Microsoft Learn Zoom

Also, HIPAA doesn't actually certify platforms—there isn't a government “HIPAA certified” badge. Zoom

If you tell me (1) whether you're solo or have other coaches, (2) roughly how many clients, and (3) whether you need recording/transcription/AI notes, I can narrow this to a specific privacy-oriented stack for your coaching practice (video + scheduling + email + notes + file storage), including which vendors offer BAAs.

learn.microsoft.com

Doxy.me is worth considering if you want something designed around sensitive client/healthcare conversations rather than a general-purpose collaboration suite. It offers BAAs and group calling, and says it doesn't record or retain video/audio calls.

For an executive coach handling confidential 1:1 conversations, leadership assessments, personal development issues, or sensitive organizational topics, you’ll want something that is HIPAA-like in practice even if you are not legally subject to HIPAA. The key is not just encryption — look for:

• A Business Associate Agreement (BAA) or equivalent privacy/data-processing agreement if you want healthcare-grade safeguards. (A BAA alone does not make you HIPAA compliant, but it is an important signal and contract mechanism.) HHS.gov
• Strong access controls (MFA, waiting rooms/lobbies, host controls)
• No default cloud recording or AI transcription unless you explicitly control storage and permissions
• Audit logs/admin controls
• Clear data retention policies
• Encryption in transit and at rest HipaaKit

Strong options for executive coaching

My shortlist for an executive coach

Best overall: Zoom with a privacy-first configuration

Good balance of:

• Easy client adoption
• Breakout rooms for group coaching
• Screen sharing and whiteboards
• Familiar interface for executives

Recommended setup:

• Require meeting passwords
• Enable waiting rooms
• Disable automatic recording
• Avoid storing transcripts unless you have a clear retention policy
• Use a business/enterprise plan with appropriate contractual protections if handling especially sensitive information HIPAA Vault

Best for Fortune 500 / corporate clients: Microsoft Teams

If your clients are senior executives inside companies, Teams can be attractive because many already use corporate Microsoft identities and their IT departments may prefer it.

Best for a boutique coaching practice: a secure coaching stack

A common pattern:

• Video: Zoom/Teams/Webex
• Scheduling: a privacy-conscious scheduler
• Client notes: encrypted document system or practice-management tool
• File sharing: controlled-access storage
• Contracts: confidentiality agreement + data handling policy

For group calls specifically

Look for:

• Participant authentication (not just “anyone with the link”)
• Ability to remove participants
• Waiting room/lobby controls
• Private chat controls
• Recording restrictions
• Breakout rooms
• Host-only screen sharing

A note on “HIPAA-like”

If your clients are not patients and you are not handling protected health information, you may not need HIPAA compliance. But you can still adopt a healthcare-style privacy standard: minimize data collection, limit access, encrypt sensitive information, and clearly disclose how client information is handled.

If you tell me:

1. whether your clients are mostly individual executives, corporate-sponsored executives, or healthcare leaders,
2. whether you need recordings/transcripts, and
3. approximate group size (e.g., 6 people vs. 100-person cohorts),

I can narrow this to 2–3 best-fit platforms and a recommended security configuration.

Yes. If by “HIPAA-like privacy” you mean strong confidentiality, contractual privacy commitments, access controls, encryption, and the ability to keep sensitive coaching information out of ordinary consumer services, there are several good options.

One important distinction: HIPAA compliance isn't simply a feature of a video platform. It depends on the plan, contractual agreement (typically a BAA where HIPAA applies), configuration, and how you actually handle recordings, notes, files, and client data. Zoom Microsoft Learn

My shortlist

1. zoom.com — my first choice

For an independent executive coach, Zoom is probably the best balance of privacy, usability, and group-call functionality.

Zoom offers a BAA for qualifying paid accounts, and its security controls include encryption, waiting rooms, passcodes, meeting locks, and administrative controls. Zoom explicitly says there is no such thing as a regulatory “HIPAA certification”; rather, it supports HIPAA programs through its BAA and security controls. Zoom Zoom

For your use case, I'd configure it roughly like this:

• Paid Zoom account with the appropriate BAA/contractual protections.
• Waiting room enabled.
• Passcodes required.
• Disable participants' ability to record.
• Don't automatically cloud-record coaching sessions.
• Require authentication where practical.
• Disable unnecessary AI/transcription features unless you've deliberately assessed them.
• Use a separate secure system for client notes rather than putting extensive coaching notes into Zoom chat.
• Keep client names/details out of meeting titles where possible.

Zoom specifically states that customers with BAAs have controls over AI features and that Zoom does not use meeting content such as audio, video, chat, screen sharing, or attachments to train its or third-party AI models. Zoom

2. microsoft.com

Teams is excellent if your clients are corporate executives and you're already living in Microsoft 365.

Microsoft offers a HIPAA BAA for eligible Microsoft services, but Microsoft explicitly notes that having the BAA doesn't by itself make your operation HIPAA compliant. Your tenant configuration and practices still matter. Microsoft Learn

The advantage is that you can build a broader secure ecosystem around Teams + Microsoft 365, including calendars, documents, identity management, and organizational access controls.

3. workspace.google.com + Google Meet

This is another strong option if you prefer Google Calendar, Gmail and Drive.

Google's current HIPAA functionality documentation explicitly lists Google Meet, Calendar, Drive, Gmail, Chat and other Workspace services as covered functionality under its HIPAA Business Associate Addendum. Google Workspace

For an independent coach, I'd consider this particularly attractive if you're already using Google Workspace and want your scheduling, email, documents and video meetings under one managed environment.

4. Doxy.me

Doxy.me is worth considering if you want something that feels more like a secure telehealth practice than an executive-coaching technology stack.

It's purpose-built for healthcare/telehealth, including features such as waiting rooms, and supports BAAs. The downside is that it can feel somewhat clinical for an executive-coaching relationship, particularly with senior corporate clients. Medcurity

What I'd choose for an executive coach

I'd rank them:

1. Zoom — best combination of polished client experience + 1:1 + groups + security controls
2. Microsoft Teams — particularly compelling if your clients are Microsoft-heavy enterprises
3. Google Meet/Workspace — excellent if you're already in the Google ecosystem
4. Doxy.me — strongest choice if you want a healthcare-style privacy architecture rather than a corporate coaching experience

One thing I'd be especially careful about

Your video platform is only one part of the privacy equation.

If you're handling sensitive executive-coaching information, I'd establish a simple “confidentiality architecture”:

Video: Zoom/Teams/Meet with appropriate contractual protections
→ Scheduling: managed business account, not personal calendar
→ Notes: encrypted/managed business workspace, not a consumer notes app
→ Files: controlled business cloud storage
→ Email: business account with appropriate security
→ Recordings: off by default
→ AI transcription/summaries: off unless specifically evaluated and consented to
→ Client identity: minimize sensitive information in meeting titles, filenames and chat

And I'd distinguish “HIPAA-capable” from “HIPAA-required.” Executive coaching generally isn't automatically subject to HIPAA merely because the conversations are sensitive. If you're actually working with PHI, healthcare organizations, or acting as a business associate, that's a different legal situation.

If you tell me (1) whether you're a solo coach or have a team, (2) whether you need recordings/transcripts, and (3) whether clients are mostly corporate executives or private individuals, I can narrow this down to a specific privacy-first stack (video + scheduling + notes + email + storage) rather than just the video platform.

For an executive coach, “HIPAA-like” usually means you want healthcare-grade privacy practices even if your work is not legally covered by HIPAA. The important distinction is that a platform being “encrypted” is not enough: you typically want a vendor that offers a Business Associate Agreement (BAA) (or comparable contractual privacy commitment), strong access controls, admin controls, secure storage, and clear policies around recordings. Medcurity

Here are platforms I would shortlist for sensitive 1:1 coaching and confidential group sessions:

My practical recommendations by coaching model

Solo executive coach (premium 1:1 clients)

A strong setup would usually be:

• Zoom Healthcare/enterprise-style setup or Microsoft Teams with a properly secured Microsoft 365 environment.
• Separate client records system (don’t keep coaching notes casually in chat histories).
• Disable automatic recording unless there is a clear reason and consent process.
• Require meeting passwords and waiting rooms/lobbies.

Executive coach running confidential cohorts or leadership groups

Prioritize:

• Waiting room/lobby controls.
• Ability to remove participants.
• Participant authentication.
• No exposed meeting links.
• Host-only recording permissions.
• Clear retention/deletion policies.

If you handle topics that overlap with mental health, trauma, medical issues, or employee health information

Consider using a platform designed for regulated conversations and get professional advice on your obligations. A BAA alone does not make your entire workflow compliant; your storage, notes, email, scheduling, and devices matter too. Medcurity

Avoid for highly sensitive coaching

• Free consumer video accounts.
• Recording sessions to personal laptops.
• Storing client notes in ordinary chat apps.
• Shared team accounts without individual logins.
• Calendar invites that expose client names or sensitive session titles.

If you tell me:

1. whether you are a solo coach or coaching firm,
2. whether sessions are 1:1 only or groups of executives,
3. whether you need recording/transcription/AI notes, and
4. what tools you already use (Google Workspace, Microsoft 365, Zoom, etc.),

I can narrow this to a short recommended stack.

Yes. If by “HIPAA-like privacy” you mean strong contractual, technical, and administrative safeguards for confidential coaching information, I’d focus on platforms that can support a HIPAA-compliant deployment—even if your coaching practice itself is not subject to HIPAA.

One important distinction: HIPAA compliance is not a property you get simply by choosing a particular app. Configuration, contracts, account controls, retention practices, and your own policies matter too. Microsoft explicitly makes this point, and Zoom says the same. Microsoft Learn Zoom

My shortlist

1. Zoom — probably my first choice

For an executive coach doing both 1:1 sessions and group calls, Zoom is particularly practical. Zoom offers a BAA for customers who need one and has controls specifically relevant to sensitive conversations: waiting rooms, passcodes, meeting locking, recording restrictions, permissions, encryption options, and administrative controls. Zoom Zoom

The key is to use the appropriate paid/business/healthcare configuration and actually execute the BAA where applicable, rather than assuming a normal consumer Zoom account is equivalent.

zoom.com

2. Microsoft Teams — excellent if you already have Microsoft 365

Teams makes sense if your practice already runs on Microsoft 365. Microsoft offers a HIPAA BAA for covered customers and provides extensive administrative/security controls. Microsoft also explicitly says that signing the BAA doesn't by itself make your use compliant; you remain responsible for configuring and operating the service appropriately. Microsoft Learn

This is particularly attractive if you also want your email, calendar, files, identity management, and meetings under one security ecosystem.

learn.microsoft.com

3. Google Meet — good if you're already in Google Workspace

I'd consider this if your practice is built around Gmail, Calendar, Drive and Google Workspace. The advantage isn't necessarily that Meet is inherently more private than Zoom; it's that you can consolidate your security, identity, storage and administrative controls into one ecosystem.

4. Webex — strong security, less compelling for a solo coach

Webex is worth considering if your clients include highly security-conscious corporations or you anticipate enterprise procurement/security reviews. For a typical independent executive coach, however, I'd generally choose Zoom or Teams for ease of use unless a client specifically requires Webex.

The bigger issue: recordings, transcripts and AI

For coaching, this may matter more than the video platform itself.

I'd strongly recommend a policy such as:

• Don't record coaching sessions by default.
• Disable automatic cloud recording.
• Disable automatic transcription unless there is a specific business need.
• Be extremely cautious with AI meeting assistants, summaries and searchable transcripts.
• Don't put coaching notes containing sensitive personal information into ordinary collaboration/chat channels.
• Use MFA on your administrator account.
• Require a waiting room/passcode for sessions.
• Don't use publicly reusable meeting links.
• Keep client documents in a properly secured business storage system rather than your personal cloud account.
• Have a written retention/deletion policy.
• Tell clients exactly what is and isn't recorded/stored.
• Use separate business accounts rather than personal/free accounts.

Zoom, for example, specifically provides controls allowing organizations to restrict recording and other functionality for sensitive meetings. Zoom

What I'd choose for your practice

Solo/independent executive coach: Zoom paid + strong privacy configuration.

Already paying for Microsoft 365: Teams may be the cleaner solution.

Already paying for Google Workspace: Google Meet is reasonable, provided you configure the Workspace environment appropriately.

Working with Fortune 500/legal/financial clients who scrutinize vendors: I'd look harder at Teams, Webex, or enterprise Zoom, depending on their vendor-security requirements.

And I'd avoid making the marketing claim “HIPAA-compliant executive coaching” unless you have actually determined that HIPAA applies to your practice and have implemented the necessary compliance program. A safer framing is “privacy- and security-focused client communications” unless counsel/compliance professionals have confirmed otherwise.

If you tell me (1) whether you're solo or have a coaching team, (2) whether you use Google Workspace or Microsoft 365, and (3) whether you need recording/transcription, I can narrow this to a specific setup—including the exact privacy settings I'd use.

learn.microsoft.com

3. Google Meet — good if you're already in Google Workspace

I'd consider this if your practice is built around Gmail, Calendar, Drive and Google Workspace. The advantage isn't necessarily that Meet is inherently more private than Zoom; it's that you can consolidate your security, identity, storage and administrative controls into one ecosystem.

4. Webex — strong security, less compelling for a solo coach

Webex is worth considering if your clients include highly security-conscious corporations or you anticipate enterprise procurement/security reviews. For a typical independent executive coach, however, I'd generally choose Zoom or Teams for ease of use unless a client specifically requires Webex.

The bigger issue: recordings, transcripts and AI

For coaching, this may matter more than the video platform itself.

I'd strongly recommend a policy such as:

• Don't record coaching sessions by default.
• Disable automatic cloud recording.
• Disable automatic transcription unless there is a specific business need.
• Be extremely cautious with AI meeting assistants, summaries and searchable transcripts.
• Don't put coaching notes containing sensitive personal information into ordinary collaboration/chat channels.
• Use MFA on your administrator account.
• Require a waiting room/passcode for sessions.
• Don't use publicly reusable meeting links.
• Keep client documents in a properly secured business storage system rather than your personal cloud account.
• Have a written retention/deletion policy.
• Tell clients exactly what is and isn't recorded/stored.
• Use separate business accounts rather than personal/free accounts.

Zoom, for example, specifically provides controls allowing organizations to restrict recording and other functionality for sensitive meetings.

What I'd choose for your practice

Yes. For an executive-coaching practice, I’d look for HIPAA-grade controls even if HIPAA technically doesn’t apply to your coaching business. The key is not the marketing label “HIPAA compliant”; it’s the combination of a suitable paid plan, contractual privacy commitments, encryption/access controls, and your own configuration. HHS likewise says a BAA is central when a cloud provider is handling PHI, but the contract alone does not make your overall operation compliant. HHS.gov HHS.gov

My shortlist

1. Zoom — probably my first choice

For an executive coach doing both private sessions and confidential groups, I'd lean toward Zoom. Zoom currently offers a BAA and HIPAA-oriented configuration on eligible paid plans, and its security model includes encryption, waiting rooms, access controls, and administrative controls. Zoom Zoom

It's particularly attractive for coaching because clients already know how to use it, and it handles group facilitation better than many privacy-focused alternatives.

One important nuance: don't assume ordinary/free Zoom is equivalent to a privacy-oriented deployment. You want the appropriate paid account and the BAA in place if you're specifically trying to achieve HIPAA-like contractual protection. Zoom

2. Microsoft Teams — excellent if you're already in Microsoft 365

Teams is a strong choice if you want your coaching practice to have a broader secure business environment around the calls: Microsoft 365 email, calendar, files, identity management, retention policies, etc.

Microsoft explicitly offers a HIPAA BAA for eligible Microsoft services, while also emphasizing that the BAA itself doesn't guarantee compliance—you remain responsible for configuration and your overall compliance program. Microsoft Learn

For an executive coach working with corporate executives and HR/leadership teams, Teams can actually be the better ecosystem choice because many clients already live in Microsoft 365.

3. Google Meet — good if you're already a Google Workspace user

Google Workspace is another reasonable choice if Gmail, Calendar, Drive and Meet are already central to your practice. Paid Workspace configurations can support HIPAA-related requirements and a BAA, but again, configuration and account tier matter. HIPAA Vault Northline Technologies

I'd put it slightly behind Zoom for a coaching-specific practice because Zoom tends to give you a more mature meeting/facilitation experience.

4. Webex — very solid, but probably more platform than you need

Cisco Webex is a credible choice when your clients are particularly security-conscious enterprises. It's capable of enterprise security and compliance controls, including HIPAA-oriented deployments. HIPAA Vault

For a solo coach, though, I wouldn't choose it over Zoom unless a client organization specifically prefers Webex.

The configuration matters as much as the platform

For your use case, I'd set up your platform approximately like this:

• Unique meeting IDs rather than a permanent personal meeting room for confidential sessions.
• Passcodes on every meeting.
• Waiting room/lobby enabled for 1:1s and especially groups.
• Host authentication/MFA enabled.
• Participant screen sharing disabled by default; enable only when needed.
• File transfer and chat restricted where appropriate.
• Cloud recording off by default. If you record, treat the recording as highly sensitive client data and establish a defined retention/deletion policy.
• AI meeting summaries/transcription off by default unless you have explicitly evaluated the vendor's data handling and obtained appropriate client consent.
• Don't put sensitive coaching notes in meeting titles, calendar invitations, chat, or filenames.
• Use a separate secure system for coaching notes and client records, rather than treating the video platform as your client-record system.
• Require your own devices to use full-disk encryption, strong passwords, MFA and automatic screen locking.

For group coaching, I'd additionally establish a participant confidentiality agreement: the platform can secure the transmission, but it can't prevent another participant from taking a screenshot, recording their screen, or repeating something they heard.

One important distinction

“HIPAA-like privacy” is actually a useful way to frame your requirement because HIPAA may not apply to an executive coach simply because the conversations are sensitive. What you're really asking for is a security/privacy architecture comparable to what you'd expect in a regulated environment.

So I would prioritize:

Zoom paid + BAA → carefully configured privacy controls → secure notes/storage → MFA/device security → explicit client confidentiality policies.

If you're a solo coach with mostly 1:1 clients and occasional groups, that's probably the best balance of security, usability, and client familiarity. If you're already deeply invested in Microsoft 365, I'd choose Teams instead.

If you tell me (1) solo vs. coaching firm, (2) approximate number of clients, (3) whether you record sessions, and (4) whether you use Google Workspace or Microsoft 365, I can narrow this to a specific stack—including secure notes, email, scheduling, file storage, and payments—not just the video platform.

For an executive coach working with corporate executives and HR/leadership teams, Teams can actually be the better ecosystem choice because many clients already live in Microsoft 365.

3. Google Meet — good if you're already a Google Workspace user

Google Workspace is another reasonable choice if Gmail, Calendar, Drive and Meet are already central to your practice. Paid Workspace configurations can support HIPAA-related requirements and a BAA, but again, configuration and account tier matter. HIPAA Vault northlinetech.com

I'd put it slightly behind Zoom for a coaching-specific practice because Zoom tends to give you a more mature meeting/facilitation experience.

4. Webex — very solid, but probably more platform than you need

Cisco Webex is a credible choice when your clients are particularly security-conscious enterprises. It's capable of enterprise security and compliance controls, including HIPAA-oriented deployments.

For a solo coach, though, I wouldn't choose it over Zoom unless a client organization specifically prefers Webex.

The configuration matters as much as the platform

For your use case, I'd set up your platform approximately like this:

Yes. For an executive-coaching practice, I’d think in terms of “HIPAA-like” controls rather than HIPAA compliance unless you actually handle protected health information on behalf of a HIPAA-covered entity. The strongest options are platforms that offer enterprise security, contractual privacy commitments, strong access controls, encryption, and administrative control over recordings/transcripts.

My shortlist

1. Zoom — probably my first choice

Zoom's security & compliance information

Zoom is particularly attractive for 1:1 coaching plus group programs because it has mature meeting controls and doesn't require clients to maintain complicated accounts. Importantly, Zoom currently offers a Business Associate Agreement (BAA) on eligible paid plans, and its healthcare configuration supports controls such as encryption, passcodes, waiting rooms and meeting locking. support.zoom.com

You don't need to be a healthcare provider to use those security capabilities. And don't confuse the existence of a BAA with automatic HIPAA compliance: Zoom itself says compliance depends on how the customer configures and uses the service. www.zoom.com

For your use case, I'd configure Zoom roughly as:

• Waiting room on
• Meeting passcode required
• Only host allowed to admit participants
• Participant screen sharing off by default
• Cloud recording off by default
• Automatic transcription/AI features off unless explicitly needed
• Host-only recording permissions
• 2FA required for your account
• Don't put sensitive client information in meeting titles, invitations or chat
• Separate links for private 1:1 sessions and group programs

2. Microsoft Teams

If you're already paying for Microsoft 365, Teams can be an excellent choice. Microsoft's enterprise plans provide considerably more administrative/security functionality than consumer Teams; Microsoft also supports HIPAA use when the appropriate contractual and configuration requirements are met. learn.microsoft.com

The big advantage is the ecosystem: Teams + OneDrive/SharePoint + Microsoft 365 can give you a coherent security model for client documents, scheduling and communications rather than stitching together multiple services.

I'd favor Teams over Zoom if your practice already lives inside Microsoft 365.

3. Google Meet + Google Workspace

This is the natural alternative if you're already a Google Workspace practice. I'd use paid Workspace, not consumer Gmail/Meet, and configure the entire Workspace environment—not just the video calls—for sensitive information.

The advantage is similar to Microsoft: Gmail, Calendar, Drive and Meet can be governed under one organizational security model.

4. Webex

Cisco Webex

Webex is worth considering if your clients are executives at larger companies and you want a particularly enterprise-oriented security posture. It's generally more infrastructure than a solo coach needs, though.

The bigger issue: your whole client-data stack

A secure video platform won't help much if your client notes are sitting in an ordinary consumer Google Drive, your intake forms are emailed around, and session recordings are automatically transcribed into an AI service.

For a genuinely sensitive coaching practice, I'd establish these rules:

Client information

• Use a business/enterprise account, never a personal consumer account.
• Encrypt data at rest and in transit.
• Use MFA everywhere.
• Keep client records in a dedicated business system.
• Minimize the amount of personally identifiable information you collect.

Calls

• No recording by default.
• No automatic transcripts by default.
• No AI meeting assistant by default.
• Waiting room + passcode for groups.
• Don't reuse a permanent meeting link for sensitive sessions.

Group coaching

• Tell participants explicitly that other participants will hear what they say.
• Don't promise participants confidentiality you can't technically enforce.
• Consider prohibiting recording/screenshots by participants in your participation agreement.
• Keep the participant list itself private where possible.

AI is the area I'd be especially cautious about. If you're feeding coaching transcripts, assessments, or detailed client notes into an AI service, evaluate its data-retention, training, deletion, administrator-access and contractual terms separately from the video platform.

One important distinction

If your clients simply share business/personal coaching information, you don't necessarily need a HIPAA-compliant system. HIPAA applies to specific covered entities and business associates handling PHI. support.zoom.com

But if, for example, you're coaching physicians or executives through a healthcare organization and you're receiving identifiable patient information in the course of that work, the legal analysis can change. In that situation I'd get privacy counsel involved rather than relying on a vendor's “HIPAA-ready” marketing.

My practical recommendation for a solo executive coach: Zoom on a paid business/eligible plan, with the privacy settings locked down and recording/transcription/AI disabled by default. If you're already deeply invested in Microsoft 365 or Google Workspace, I'd choose the corresponding enterprise video platform instead of adding another ecosystem.

If you tell me (1) solo coach vs. coaching firm, (2) whether you record sessions, and (3) whether you use Google Workspace or Microsoft 365, I can narrow this to a specific stack—including secure intake/forms, notes, scheduling, storage, messaging and payments.

Yes. For an executive-coaching practice, I’d look for platforms that can support HIPAA-level safeguards even if HIPAA itself doesn’t legally apply to your coaching business. The key distinction is that “encrypted” or “secure” alone isn’t enough—you want contractual commitments, administrative controls, appropriate retention settings, and ideally a Business Associate Agreement (BAA) if you may handle actual PHI.

My shortlist

Zoom would probably be my first choice for you. Zoom explicitly offers BAAs and controls intended to support HIPAA-compliant programs, including its healthcare offering. Zoom Zoom

Teams is also strong: Microsoft says Teams supports HIPAA-related compliance, but the important caveat is that you need the appropriate Microsoft 365 service and configuration rather than assuming a standalone/free Teams account is sufficient. Microsoft Support Microsoft Learn

What I'd configure for executive coaching

Regardless of platform, I'd make these defaults:

• Unique meeting ID/link per client or session, rather than one permanent meeting room.
• Waiting room/lobby enabled.
• Meeting passcode required.
• Only host can admit participants or share screen unless explicitly enabled.
• No automatic cloud recording.
• If sessions must be recorded, establish a defined retention/deletion policy and secure storage.
• Disable or carefully govern AI meeting assistants, transcription, summaries, and automated notes unless you have specifically evaluated where that data goes and what contractual protections apply.
• Use MFA on your coach/admin account.
• Keep client notes and sensitive coaching records in a separate system designed for sensitive information rather than casually storing them in meeting-chat histories.
• Have a written privacy/data-retention policy and client agreement explaining what you collect, where it's stored, who can access it, and how long you retain it.

One particularly important point: HIPAA compliance isn't a certification that a video platform simply possesses. Zoom itself notes that there is no regulatory-backed “HIPAA certified” designation; rather, it provides a BAA and security controls that can help customers meet their HIPAA obligations. Zoom

For your specific use case

I'd rank them:

1. Zoom — easiest combination of polished 1:1 coaching experience, reliable group sessions, waiting rooms, access controls, and healthcare/privacy infrastructure.

2. Microsoft Teams — potentially better if your practice already runs on Microsoft 365 and you want meetings, files, identity, and administrative controls under one ecosystem.

3. Google Meet — attractive if your practice is already built around Google Workspace.

4. Webex — very capable, particularly where enterprise security/compliance is the priority, though potentially more infrastructure than a solo executive coach needs.

If you tell me whether you're a solo coach or have a team, whether you need session recording/transcription, and whether clients ever disclose actual medical/mental-health information, I can narrow this to the 2–3 best platforms and the exact plan/configuration I'd use.

For an executive coach, you may not legally be a HIPAA-covered provider, but if your clients share health-adjacent information (burnout, mental health, disability, medical issues, family matters, etc.), it is reasonable to look for HIPAA-like privacy controls. The key question is less “Is this platform HIPAA compliant?” and more:

• Will the vendor sign a Business Associate Agreement (BAA) (if HIPAA applies)?
• Are sessions encrypted?
• Are recordings disabled or tightly controlled?
• Are access logs, admin controls, and authentication available?
• Does the platform fit 1:1 confidential coaching and group executive sessions?

A platform can be secure but still not be appropriate if you configure it poorly. Medcurity

Strong options to consider

HHS.gov PoliWriter## My shortlist for an executive coach

Best overall for executive coaching

Zoom with a properly secured paid account

• Best client familiarity
• Strong for: - 1:1 coaching
• leadership groups
• workshops
• breakout exercises
• screen sharing
• Configure: - waiting room enabled
• meeting passwords
• host-only recording
• no automatic cloud recordings unless you have a clear retention policy

Best if you already use Microsoft

Microsoft Teams

• Particularly good if your clients are corporate executives.
• Easier to align with enterprise security expectations.

Best “therapy-level privacy” feel for private clients

Doxy.me

• A good choice if your practice is mostly confidential 1:1 conversations and you want a healthcare-style experience.

Don’t forget the rest of your stack

Video is only one piece. For sensitive coaching data, also evaluate:

• Scheduling: avoid exposing client names or sensitive notes in public calendar descriptions.
• Client notes: use encrypted, access-controlled storage rather than ordinary documents.
• Email: consider a business email provider with strong security controls.
• AI meeting summaries: be very careful—many AI transcription tools create a new copy of sensitive information.
• Recordings: decide whether you need them at all; if yes, define retention and deletion rules.

A practical setup for many executive coaches would be:

• Video: Zoom or Teams (secure configuration)
• Scheduling: secure business calendar
• Notes: encrypted coaching CRM or secure document system
• No session recording by default
• Signed confidentiality agreement with clients

If you tell me:

1. whether you record sessions,
2. typical group size (e.g., 5 people vs 50+), and
3. whether your clients are mostly individuals or corporate-sponsored executives,

I can narrow this to a recommended stack.

Yes. If by “HIPAA-like privacy” you mean strong confidentiality, encryption, access controls, minimal data exposure, and ideally a vendor willing to sign a BAA, I’d narrow the field considerably.

One important distinction: HIPAA compliance is not the same thing as being private, and you may not actually be a HIPAA-covered entity as an executive coach. But using a HIPAA-capable platform is a sensible privacy benchmark for sensitive coaching conversations.

My shortlist

1. SimplePractice — probably the easiest choice

SimplePractice is particularly interesting for a solo executive coach because it combines secure client records, messaging, scheduling, forms, and video rather than making you assemble a stack.

It explicitly supports HIPAA compliance and a BAA, and its telehealth supports group sessions of up to 15 participants. SimplePractice SimplePractice SimplePractice Support

simplepractice.com

I'd choose it if: you want one system for client intake → scheduling → notes → 1:1 calls → group calls → secure client communication.

Potential downside: It is designed around healthcare/therapy workflows, so it can feel heavier than necessary for executive coaching.

2. Microsoft Teams — excellent if you're already in Microsoft 365

Teams can be configured for HIPAA-regulated environments when you're using an appropriate Microsoft 365 offering and have the necessary contractual/compliance configuration. A 2026 review identifies Microsoft Teams Business/Enterprise as capable of HIPAA-compliant use with a BAA. HIPAA Vault

microsoft.com

I'd choose it if: your clients are executives at companies already using Microsoft 365. It gives you a very natural corporate experience and excellent group-call functionality.

The caveat is important: don't assume “Teams = HIPAA.” The specific Microsoft plan, configuration, permissions, retention policies, recordings, transcription/AI features, and BAA matter.

3. Google Workspace + Google Meet

Similarly, Google Workspace can be configured for HIPAA use with the appropriate plan and BAA; consumer Google accounts/Meet aren't equivalent. HIPAA Vault

workspace.google.com

I'd choose it if: you're already heavily invested in Gmail, Drive, Calendar and Google Docs and want a coherent ecosystem.

Again, configure it deliberately rather than assuming the default settings are sufficiently private.

4. Zoom for Healthcare

Zoom is a strong choice if video conferencing is the centerpiece of your practice. The important distinction is between the ordinary consumer/business Zoom offering and Zoom's healthcare offering; the latter is the relevant one for HIPAA-style requirements. HIPAA Vault

zoom.com

I'd choose it if: you run lots of executive groups, workshops, or coaching cohorts and want a polished video experience rather than a full practice-management system.

5. Hushmail — very good companion for sensitive email

Hushmail isn't my pick for the actual group calls, but it is worth considering for sensitive client communications, forms, and attachments.

Its healthcare offering provides encrypted email, secure forms, e-signatures, archiving and a BAA. Hushmail Hushmail

hushmail.com

What I'd actually build for an executive-coaching practice

For your use case, I'd rank the approaches:

Simplest:
SimplePractice alone → client records + secure messaging + 1:1 + groups.

Best corporate/executive experience:
Microsoft 365 + Teams → particularly compelling when clients already use Microsoft.

Best video experience:
Zoom's healthcare offering + a separate secure client-record system.

Privacy-focused communication stack:
Secure video platform + Hushmail for email/forms + encrypted/controlled document storage.

The features I'd insist on

Regardless of vendor, I'd want:

• A signed BAA if you're using HIPAA as your benchmark.
• Encryption in transit and at rest.
• MFA and strong administrative access controls.
• Waiting rooms/admission controls for group calls.
• Ability to disable or tightly control recording, transcripts and AI meeting summaries.
• Clear retention/deletion policies.
• No vendor use of your client conversations for model training or advertising.
• Audit/access logs.
• Secure file sharing rather than ordinary email attachments.
• A clear process for terminating a client relationship and deleting/exporting their data.
• Separate accounts/devices from your personal communications where practical.

One particularly important point for executive coaching: recordings and AI transcripts can turn a relatively low-risk coaching platform into a much more sensitive data repository. I'd generally make “no recording/no automatic transcription” the default, unless there is a specific reason to retain them.

If you tell me (1) roughly how many 1:1 clients you have, (2) typical group size, (3) whether you already use Google Workspace or Microsoft 365, and (4) whether you need client notes/forms, I can narrow this to the best 2–3 setups and compare their current pricing, BAA terms, recording/AI controls, and privacy architecture.

SimplePractice is particularly interesting for a solo executive coach because it combines secure client records, messaging, scheduling, forms, and video rather than making you assemble a stack.

It explicitly supports HIPAA compliance and a BAA, and its telehealth supports group sessions of up to 15 participants. SimplePractice SimplePractice SimplePractice Support

simplepractice.com

I'd choose it if: you want one system for client intake → scheduling → notes → 1:1 calls → group calls → secure client communication.

Potential downside: It is designed around healthcare/therapy workflows, so it can feel heavier than necessary for executive coaching.

2. Microsoft Teams — excellent if you're already in Microsoft 365

Teams can be configured for HIPAA-regulated environments when you're using an appropriate Microsoft 365 offering and have the necessary contractual/compliance configuration. A 2026 review identifies Microsoft Teams Business/Enterprise as capable of HIPAA-compliant use with a BAA. HIPAA Vault

microsoft.com

I'd choose it if: your clients are executives at companies already using Microsoft 365. It gives you a very natural corporate experience and excellent group-call functionality.

The caveat is important: don't assume “Teams = HIPAA.” The specific Microsoft plan, configuration, permissions, retention policies, recordings, transcription/AI features, and BAA matter.

3. Google Workspace + Google Meet

Similarly, Google Workspace can be configured for HIPAA use with the appropriate plan and BAA; consumer Google accounts/Meet aren't equivalent. HIPAA Vault

workspace.google.com

I'd choose it if: you're already heavily invested in Gmail, Drive, Calendar and Google Docs and want a coherent ecosystem.

Again, configure it deliberately rather than assuming the default settings are sufficiently private.

4. Zoom for Healthcare

Zoom is a strong choice if video conferencing is the centerpiece of your practice. The important distinction is between the ordinary consumer/business Zoom offering and Zoom's healthcare offering; the latter is the relevant one for HIPAA-style requirements. HIPAA Vault

zoom.com

I'd choose it if: you run lots of executive groups, workshops, or coaching cohorts and want a polished video experience rather than a full practice-management system.

5. Hushmail — very good companion for sensitive email

Hushmail isn't my pick for the actual group calls, but it is worth considering for sensitive client communications, forms, and attachments.

Its healthcare offering provides encrypted email, secure forms, e-signatures, archiving and a BAA. hushmail.com hushmail.com

hushmail.com

What I'd actually build for an executive-coaching practice

For your use case, I'd rank the approaches:

Simplest:
SimplePractice alone → client records + secure messaging + 1:1 + groups.

Best corporate/executive experience:
Microsoft 365 + Teams → particularly compelling when clients already use Microsoft.

Best video experience:
Zoom's healthcare offering + a separate secure client-record system.

For an executive coach, you likely do not need HIPAA compliance unless you are handling protected health information (PHI) as a covered entity/business associate, but “HIPAA-like” privacy is a useful standard for protecting confidential coaching conversations, leadership assessments, personal disclosures, and proprietary business information.

The key features to look for are:

• Business Associate Agreement (BAA) availability (even if you are not legally required to have one, it signals mature privacy practices)
• Encryption in transit and at rest
• Strong admin controls (MFA, SSO, access logs)
• Waiting rooms/lobbies and host controls
• No automatic recording
• Secure storage for notes/files
• Data retention controls
• Clear privacy terms and no training of AI models on your client data without consent

Good options:

For your specific use case:

Best overall for an executive coach

Zoom + a secure client-management stack is probably the most practical:

• private 1:1 sessions
• group coaching cohorts
• breakout rooms
• screen sharing
• easy client onboarding
• strong meeting controls

Best if your clients are executives at large companies

Microsoft Teams may be the better choice because many corporate clients already have identity and security requirements around Microsoft 365. support.microsoft.com

Best privacy-focused operating model

Consider pairing your video platform with:

• secure client portal (for documents, assessments, recordings if any)
• encrypted notes system
• password manager
• MFA everywhere
• separate business email/domain
• written confidentiality policy

A few practices I would avoid for high-trust coaching:

• personal Zoom accounts
• free Google accounts
• WhatsApp/consumer messaging for client records
• storing recordings on a laptop
• AI meeting summaries/transcription unless you have explicitly reviewed the vendor’s data handling and obtained client consent

If you tell me (1) whether you record sessions, (2) approximate group size, (3) whether clients are mostly individuals or Fortune 500/corporate-sponsored, and (4) your budget, I can narrow this to a short list.

Yes. If by “HIPAA-like” you mean strong confidentiality, contractual data protections, encryption, access controls, and minimal retention, I’d shortlist platforms that are either healthcare-oriented or willing to sign a BAA.

One important distinction: HIPAA compliance itself may not legally apply to an executive coach unless you are handling PHI in a covered-entity/business-associate relationship. But using HIPAA-grade practices can still be a very sensible privacy standard.

My shortlist

Zoom is probably where I'd start for an executive-coaching practice. Zoom explicitly offers a BAA and has healthcare/security controls, while still giving you mature group-call functionality. www.zoom.com

Zoom security & compliance

Microsoft Teams is particularly compelling if your business already lives in Microsoft 365. Microsoft supports BAAs and has extensive compliance tooling; Teams also supports end-to-end encryption for particularly sensitive meetings, although E2EE has feature limitations. learn.microsoft.com

Microsoft Teams security & compliance

Doxy.me is unusually attractive if privacy is more important than having a polished corporate-meeting ecosystem. It's designed specifically for healthcare, offers a BAA, doesn't record video/audio calls or retain chat messages, and its Premium plan now supports group calls with up to 25 participants. helpcenter.doxy.me

Doxy.me security

SimplePractice is worth considering if you're also looking for secure client messaging, scheduling, notes, and practice-management functionality rather than just video. It explicitly markets HIPAA-compliant secure messaging and has HITRUST certification. www.simplepractice.com

SimplePractice

What I'd configure regardless of platform

For executive coaching, I'd treat these as non-negotiable:

• Don't record sessions by default.
• Disable AI transcription/summaries unless you have deliberately assessed the vendor's data practices and obtained appropriate client consent.
• Require MFA on your coach/admin account.
• Use unique meeting links or authenticated invitations rather than a permanent public meeting room.
• Enable a waiting room/lobby and host controls.
• Prevent participants from joining before you.
• Restrict screen sharing to the host unless needed.
• Establish a defined retention/deletion policy for recordings, transcripts, chat, notes, and client files.
• Keep sensitive coaching notes out of ordinary email and consumer cloud storage.
• If you're actually handling PHI, execute the vendor's BAA before putting PHI into the system—merely choosing a platform that advertises HIPAA compliance isn't sufficient. Doxy.me, for example, explicitly requires the provider to have the BAA in place for HIPAA responsibilities. helpcenter.doxy.me

My recommendation: Zoom for the best balance of executive-coaching usability and security; Doxy.me if you want the most healthcare/privacy-oriented experience and your groups are ≤25; Teams if you're already deeply invested in Microsoft 365.

If you tell me (1) typical group size, (2) whether you record/transcribe sessions, and (3) whether clients are corporate executives or individuals, I can narrow this to the best 2–3 choices and compare their privacy/data-retention terms.

Yes. For an executive-coaching practice, I’d treat “HIPAA-like” as strong contractual privacy + encryption + access controls + minimal data retention, rather than assuming HIPAA itself applies. A BAA is a useful signal of maturity, but it does not by itself make your coaching practice HIPAA-compliant. support.zoom.comlearn.microsoft.com

My shortlist

1. Zoom — my default recommendation.
Zoom explicitly offers BAAs and says its healthcare offerings support HIPAA-related privacy/security requirements. Its paid plans can have a BAA, and Zoom provides controls around recordings, AI features, meeting access, etc. support.zoom.com

For executive coaching, I'd configure Zoom so that cloud recording is off by default, participants can't join before you, passcodes are required, waiting room is enabled, screen sharing is host-controlled, and meeting links aren't reused. If you use AI meeting summaries/transcription, treat that as a separate privacy decision.

2. Microsoft Teams — strongest if you want an entire secure practice stack.
Microsoft says Teams is within its HIPAA BAA framework and supports extensive compliance/security controls. learn.microsoft.com

This becomes particularly attractive if you're also storing client notes, contracts, files, and communications in Microsoft 365. You can build a much more coherent security environment around Teams + OneDrive/SharePoint + Entra ID + Purview than by stitching together lots of consumer services.

3. Google Meet — excellent if you're already in Google Workspace.
Google offers a HIPAA Business Associate Addendum for applicable services, and Meet supports encryption in transit/at rest plus additional encryption options in certain contexts. admin.google.com

I'd choose this over Zoom if your practice already lives in Gmail, Drive, Calendar, and Workspace and you want fewer vendors.

4. Webex — worth considering for particularly security-conscious clients.
Webex is a credible enterprise alternative, especially if some of your clients work for large corporations with stringent IT/security requirements. I'd put it behind Zoom/Teams for a solo executive coach primarily because the ecosystem and client familiarity tend to matter more.

The bigger issue: your workflow

For sensitive executive-coaching conversations, the video platform is only one piece. I'd aim for something like:

Video: Zoom/Teams/Meet
Client files: encrypted business cloud storage, not personal Dropbox/iCloud
Notes: encrypted business-grade system with strict access controls
Scheduling: business account, not a personal calendar account
Email: business account with MFA and appropriate retention controls
Authentication: MFA everywhere + unique passwords/password manager
Recordings: off unless there is a compelling reason to retain them
AI transcription/summaries: opt-in only, with careful vendor/data-use review
Client access: unique meeting links or strong authentication rather than a permanent public link

One particularly important distinction: “HIPAA compliant” is not the same thing as “confidential.” For coaching, I'd be especially concerned about whether a vendor uses conversation content to train AI models, how long recordings/transcripts persist, who can administer/access them, and what happens when you delete a client.

What I'd choose

For a solo/independent executive coach:

🥇 Zoom + secure business file storage — simplest, polished client experience, strong privacy controls.

🥈 Microsoft 365 + Teams — best if you want to build a genuinely security-conscious practice around one ecosystem.

🥉 Google Workspace + Meet — excellent if you're already deeply invested in Google.

If you tell me (1) whether you're solo or have a coaching team, (2) whether you record/transcribe sessions, and (3) whether clients are mostly Fortune 500/enterprise executives, I can narrow this to the best 2–3 platforms and the exact plan/security configuration I'd use.

Yes. If by “HIPAA-like” you mean strong confidentiality, encryption, access controls, auditability, and a vendor willing to sign a BAA, there are several good choices—even though HIPAA itself generally doesn't apply to executive coaching unless you're handling regulated health information in a covered-entity/business-associate context.

My shortlist

Zoom would probably be my first choice for an independent executive coach. Zoom explicitly offers BAAs and provides controls such as waiting rooms, passcodes, meeting locking, recording restrictions, permissions, and other security configurations. support.zoom.com

Microsoft Teams is particularly compelling if your practice already uses Microsoft 365. Microsoft offers a BAA covering in-scope services, and Teams supports end-to-end encrypted meetings with up to 200 participants. learn.microsoft.com

Google Workspace/Meet is similarly strong if you're already on Google. Google offers a HIPAA Business Associate Amendment for qualifying Workspace services, but you need to actually accept it and configure your environment appropriately. knowledge.workspace.google.com

doxy.me is worth considering if you want something designed around confidential healthcare conversations rather than a general-purpose business collaboration suite. Its documentation specifically describes HIPAA-oriented security and group calls. help.doxy.me

One important distinction

Don't equate “HIPAA compliant” with “private.” A BAA is useful, but your own configuration and practices matter enormously. Even Microsoft explicitly says that having its BAA does not by itself make your organization HIPAA compliant. learn.microsoft.com

For an executive-coaching practice, I'd configure whichever platform you choose roughly like this:

• No meeting recordings by default
• Disable or tightly restrict AI transcription/summarization unless clients explicitly consent
• Require authenticated participants where practical
• Unique meeting links rather than one permanent public link
• Waiting room/lobby for sensitive sessions
• Strong passcodes
• Prevent participants from joining before you
• Lock meetings once everyone is present
• Restrict screen sharing to host unless needed
• Minimize stored chat/files/recordings
• MFA on your administrator and coach accounts
• Separate client information from ordinary email/calendar data where practical
• Have a written retention/deletion policy
• Use encrypted, access-controlled storage for coaching notes
• Have a client-facing privacy/confidentiality policy and appropriate consent language

What I'd choose

Solo executive coach: Zoom Pro/Business with the BAA and a locked-down configuration.

Coach/practice already running Microsoft 365: Teams + Microsoft 365, especially if you want centralized identity, file permissions, retention and compliance controls.

Coach already deeply invested in Google Workspace: Google Meet + Workspace, with the appropriate BAA and security configuration.

You want something that feels more like a private telehealth room: doxy.me.

If you tell me (1) solo vs. coaching firm, (2) Zoom/Google/Microsoft ecosystem you're already using, (3) whether you record/transcribe sessions, and (4) approximate number of clients, I can narrow this to the best 2–3 setups and the specific plan/configuration I'd use.

Yes. If by “HIPAA-like” you mean strong confidentiality, encryption, administrative controls, and a vendor contract that commits the provider to protecting sensitive information, I’d narrow the field considerably.

One important distinction: HIPAA compliance is not the same thing as being a secure platform, and an executive coach generally isn't automatically subject to HIPAA simply because conversations are sensitive. But using a platform that can support HIPAA-style controls is a sensible privacy standard.

My shortlist

Zoom is probably my first choice for your use case. Zoom explicitly offers a BAA and says its paid plans can be used with the BAA; its security/compliance program includes SOC 2 and HITRUST reporting. www.zoom.com

Zoom's HIPAA/security information

Microsoft Teams is particularly attractive if you want your client records, email, calendar, files, and meetings under one Microsoft 365 environment. Microsoft says Teams is among its HIPAA in-scope services and that its BAA covers eligible Microsoft services. learn.microsoft.com

Microsoft's HIPAA/Teams documentation

Google Meet is also viable if you're already on Google Workspace. Google's current HIPAA functionality specifically includes Meet, Gmail, Calendar, Drive, Chat and other Workspace components under its HIPAA Business Associate Addendum. admin.google.com

Google Workspace HIPAA information

For an executive-coaching practice, I'd configure it this way

Don't just buy a “secure” plan and assume you're done. I'd establish a privacy baseline:

• Paid business/enterprise account, not a free consumer account.
• BAA/DPA or equivalent contractual privacy agreement where appropriate.
• Unique meeting IDs rather than a permanent public meeting room.
• Passcodes + waiting room/lobby for every client meeting.
• Disable participants' ability to record unless explicitly needed.
• If you record, establish a written retention/deletion policy.
• Don't put sensitive coaching notes in meeting-chat transcripts.
• Turn off or carefully govern AI transcription, meeting summaries and AI assistants unless you've specifically reviewed their data handling.
• Require MFA for your own account.
• Use SSO/device controls if you have a team.
• Keep coaching notes in a separate secure system, rather than treating the video platform as your client-record system.
• Have a written privacy policy explaining what you collect, where it is stored, who can access it, and how long you retain it.

The recording/AI issue is especially important. For example, Zoom says that customers with a BAA have controls over AI features and states that it does not use meeting communications such as audio, video, chat and screen sharing to train its or third-party AI models. www.zoom.comsupport.zoom.com

What I'd choose

Solo executive coach:
Zoom + a secure client-management/document system is the simplest strong setup.

Coach already living in Microsoft 365:
Teams + OneDrive/SharePoint + Microsoft 365 security controls is compelling.

Coach already living in Google Workspace:
Google Meet + Drive + Workspace security controls is perfectly reasonable.

I would not choose a platform merely because its website says “encrypted” or “private.” For truly sensitive coaching, the contractual commitment, account controls, recording/transcription behavior, data retention, and access management matter at least as much as encryption.

Also, a BAA doesn't magically make your practice HIPAA compliant. HHS explicitly says that having a BAA with a cloud provider is only one part of compliance; the organization using the service still has its own obligations. www.hhs.gov

If you tell me whether you're solo or have a coaching team, whether you record sessions, and whether you use Google Workspace or Microsoft 365, I can narrow this to a concrete “best stack for an executive coach” with the specific plan/features I'd use.

Yes. If by “HIPAA-like” you mean strong privacy, contractual commitments, encryption, administrative controls, and minimal exposure of client data, there are several good choices. You don't necessarily need to be HIPAA-covered as an executive coach, but using a platform that can support HIPAA compliance is a useful privacy benchmark.

My shortlist

Zoom is probably my first choice for an executive-coaching practice. Zoom explicitly offers a BAA, and its HIPAA-oriented controls include encryption and security/compliance reporting. Importantly, Zoom says customers with BAAs can control AI features and that it doesn't use customer communications to train its AI models. www.zoom.com

Zoom security & compliance information

Microsoft Teams is particularly attractive if your practice already runs on Microsoft 365. Microsoft offers a HIPAA BAA covering in-scope services, although Microsoft explicitly notes that having the BAA alone doesn't make your organization HIPAA compliant. learn.microsoft.comwww.zoom.com

Microsoft HIPAA compliance documentation

Google Workspace/Meet is similarly compelling if you're a Google Workspace shop. Google provides a HIPAA Business Associate Amendment that administrators can accept for eligible Workspace services. knowledge.workspace.google.com

VSee deserves a serious look if privacy is more important than having the most familiar business-meeting experience. VSee offers encrypted 1:1 and group video, secure messaging, waiting rooms and a BAA; its current Clinic offering specifically supports both individual and group calls. vsee.com

VSee Clinic

doxy.me is another privacy-oriented option, particularly if you want something designed around confidential client/healthcare conversations rather than general-purpose corporate meetings. It describes its service as being built around HIPAA security/privacy and offers BAAs. Its group-call capabilities are available on appropriate plans. helpcenter.doxy.me

What I'd choose for an executive coach

Best overall: Zoom + a signed BAA + carefully configured privacy settings.

You get:

• polished client experience
• excellent 1:1 and group meetings
• waiting rooms
• strong host controls
• screen sharing
• recording controls
• familiar interface for executives
• contractual BAA option
• relatively mature security/compliance program

Best privacy-first alternative: VSee.

I'd consider VSee if your clients routinely discuss extremely sensitive personal, employment, financial, or leadership information and you want the platform itself to be more explicitly oriented toward confidential/clinical communications.

The bigger issue: the platform isn't the whole privacy system

For your use case, I'd evaluate the entire data flow, not just video encryption. In particular:

1. BAA/DPA/contractual privacy terms — even if HIPAA technically doesn't apply to you.
2. AI/transcription — turn off meeting AI, automated summaries, transcription, and similar features unless you have explicitly vetted where that data goes.
3. Recording — preferably off by default.
4. Cloud recordings — if you record, establish retention/deletion rules and restrict access.
5. Waiting rooms/admission controls — especially for group sessions.
6. Participant identity — don't allow anonymous attendees into sensitive group conversations.
7. Client notes — keep coaching notes out of the video platform unless you've specifically evaluated its storage/security.
8. Email/calendar — meeting invitations can themselves reveal sensitive information.
9. File sharing/chat — decide whether clients should be permitted to exchange sensitive documents through the platform.
10. Your own devices — full-disk encryption, strong passwords, MFA, automatic updates and separate work accounts matter enormously.

One important distinction: “HIPAA compliant” isn't a magic security certification. Zoom and Microsoft both explicitly explain that a BAA supports compliance but doesn't by itself make the customer HIPAA compliant. learn.microsoft.comwww.zoom.com

If you tell me (a) whether you're solo or have a coaching team, (b) whether you need recording/transcription, and (c) whether you already use Google Workspace, Microsoft 365, or Zoom, I can narrow this to the 2–3 best setups and the specific privacy configuration I'd use for an executive-coaching practice.

Yes. For an executive-coaching practice handling highly sensitive personal, professional, or organizational information, I’d prioritize contractual privacy commitments, strong encryption, admin controls, auditability, and control over recordings/data retention—not merely whether a platform advertises itself as “secure.”

My shortlist

Zoom, Microsoft Teams, Google Meet and Webex can all be configured for HIPAA-related use under appropriate plans/agreements; the important distinction is that the free/consumer version isn't equivalent to the appropriately contracted business version. www.hipaavault.comwww.zoom.com

What I'd choose for an executive coach

1. Zoom — probably my first choice.

For coaching specifically, Zoom has a nice balance of ease for clients and sophisticated controls for you. Zoom says it will enter into a BAA for customers who need one and provides security/compliance documentation, including SOC 2 + HITRUST reporting. www.zoom.com

I'd configure it with:

• Waiting room
• Passcode required
• Authenticated participants where practical
• No automatic cloud recording
• Recording disabled by default unless explicitly needed
• Restrict screen sharing to host
• Disable participant file transfer/chat if you don't need them
• Keep meeting links unique rather than using a permanent personal meeting room
• Strong account-level admin/security settings

For group coaching, Zoom is particularly convenient because clients generally already know how to use it.

2. Microsoft Teams — best if you want everything under one secure business account.

If you're already using Microsoft 365 for email, documents and calendars, Teams is compelling. Microsoft provides a HIPAA BAA for eligible services, while emphasizing that the BAA itself doesn't magically make an organization compliant—you still have to configure and operate the environment appropriately. learn.microsoft.com

Teams is especially attractive if your coaching practice involves corporate clients, because you can build a more controlled Microsoft 365 environment around your coaching work.

3. Webex — excellent if security is more important than simplicity.

Cisco's Webex platform offers strong encryption, administrative controls, data-residency options, retention/eDiscovery capabilities and HIPAA-related compliance support. www.webex.com

I'd consider it if your clients include executives at heavily regulated companies or organizations with their own security requirements.

4. Google Meet — very good if you're already a Google Workspace practice.

Google currently lists Meet among the functionality covered by its HIPAA Business Associate Addendum, along with Gmail, Drive, Calendar and other Workspace services. workspace.google.com

The advantage is having your email + calendar + documents + video + storage inside one managed environment.

One important distinction

“HIPAA-like privacy” isn't the same thing as HIPAA compliance.

If you're an executive coach rather than a HIPAA-covered healthcare provider/business associate, you generally don't need to make your business legally HIPAA compliant merely because conversations are confidential. But you can adopt HIPAA-style practices as a very good privacy baseline.

Also, a BAA is not a magic security certificate. HHS specifically explains that a cloud provider handling ePHI needs an appropriate BAA and the organization has its own compliance/security responsibilities. www.hhs.gov

I'd build your stack like this

For a solo/small executive-coaching practice, I'd lean toward:

Zoom + Microsoft 365 or Google Workspace + encrypted password manager + encrypted client-document storage

And I'd establish a simple policy:

Don't put sensitive coaching notes in the video platform's chat, don't record sessions unless necessary, and don't let the video platform become the permanent repository for client information.

That last point matters enormously. A highly secure video call can still create a privacy problem if you automatically generate recordings, transcripts, AI summaries, meeting-chat histories, or searchable cloud notes.

If you tell me (1) roughly how many clients you have, (2) whether you record/transcribe sessions, and (3) whether clients are mostly individuals or corporate executives, I can narrow this to the best 2–3 platforms and the exact privacy configuration I'd use for a coaching practice.

Yes. If by “HIPAA-like” you mean strong confidentiality, a contractual privacy commitment, encryption, access controls, auditability, and the ability to keep sensitive coaching information out of ordinary consumer accounts, I’d focus on enterprise platforms that can actually execute a BAA or comparable data-processing/security agreement.

My shortlist

1. Zoom Workplace — my first choice

Zoom explicitly supports HIPAA programs through a Business Associate Agreement, and its paid plans can be placed under a BAA. It also provides security controls such as waiting rooms, passcodes, meeting locks and administrative controls. www.zoom.comsupport.zoom.com

For an executive coach, this is attractive because you can have:

• private 1:1 sessions
• recurring private client meetings
• secure group coaching
• waiting rooms/admission controls
• controlled recording
• administrative policies
• a single familiar experience for clients

One particularly important point: Zoom says that, under its BAA arrangements, customer communications aren't used to train Zoom's or third-party AI models. www.zoom.comsupport.zoom.com

Zoom's HIPAA/BAA information

2. Microsoft Teams — best for a full business stack

Teams is compelling if you want secure video + email + calendar + document storage + messaging + permissions rather than just a meeting platform.

Microsoft says Teams is included within its HIPAA-supported services and that Microsoft offers a BAA for applicable customers/services. support.microsoft.comlearn.microsoft.com

For a coaching practice, Microsoft 365 can give you a fairly comprehensive secure environment for:

client call → calendar → client documents → internal notes → email → file sharing

That's a major advantage if you're trying to avoid sensitive information being scattered across five different SaaS products.

Microsoft's HIPAA compliance documentation

3. Google Workspace + Meet — excellent alternative

Google Workspace is another strong choice if you prefer Gmail, Calendar and Drive.

Google's current HIPAA Included Functionality specifically lists Google Meet, Gmail, Drive, Calendar, Chat and other Workspace services, provided the applicable HIPAA agreement is accepted. knowledge.workspace.google.com

This can be particularly convenient for an independent coach because everything can live under one managed business Workspace rather than personal Gmail/Drive accounts.

Google's HIPAA Workspace guidance

What I'd choose for an executive-coaching practice

If your primary concern is confidential conversations:
→ Zoom Workplace + a properly executed BAA

If you want to build a whole secure practice infrastructure:
→ Microsoft 365 + Teams

If you're already deeply invested in Gmail/Drive/Calendar:
→ Google Workspace + Meet

The important caveat is that “HIPAA compliant” doesn't mean the platform magically makes your coaching practice HIPAA compliant. Even Microsoft explicitly says that having its BAA doesn't by itself make your organization compliant. support.microsoft.comlearn.microsoft.com

The bigger issue: don't just secure the video call

For coaching, I'd evaluate the entire client-data workflow, not just video:

1. Video: BAA/DPA, encryption, meeting controls, recording policy.
2. Notes: encrypted business storage—not personal Notes, Dropbox, etc.
3. AI transcription: ideally off by default unless you've specifically vetted the AI provider and its data practices.
4. Recordings: preferably disabled by default; if enabled, define retention/deletion rules.
5. Email: business-managed account, MFA, appropriate encryption/security controls.
6. File sharing: managed business accounts, no “anyone with the link.”
7. Client intake: secure forms rather than ordinary web forms.
8. Access: MFA + unique accounts + least-privilege permissions.
9. Offboarding: immediately revoke access when a contractor/employee leaves.
10. Retention: establish how long you actually retain coaching notes and recordings.

One especially important distinction: executive coaching isn't automatically subject to HIPAA simply because clients may discuss health, stress, medication, or other sensitive matters. HIPAA applies to particular covered entities/business associates and PHI relationships. support.microsoft.comlearn.microsoft.com So I'd treat HIPAA-level security as a design standard, rather than assuming you legally need HIPAA compliance.

If you tell me (a) whether you're a solo coach or have a team, (b) whether you record/transcribe sessions, and (c) whether you need a secure client portal/intake/forms in addition to video, I can narrow this to a specific stack and plan rather than just a meeting-platform recommendation.

For an executive coach handling sensitive 1:1 conversations, confidential business issues, assessments, or potentially health-adjacent information, I’d look for platforms that provide HIPAA-like controls even if you are not legally a HIPAA-covered entity. The key features are:

• A Business Associate Agreement (BAA) or equivalent contractual privacy commitment (if you need HIPAA-level handling)
• Encryption in transit and at rest
• Admin controls, MFA, audit logs
• No automatic recording or AI transcription unless explicitly enabled and protected
• Data residency/control options if clients require them
• Strong privacy terms for client notes, files, and recordings

A few strong options:

My shortlist by coaching model

Solo executive coach (mostly 1:1 + occasional small groups)

• Zoom on an appropriate business/healthcare configuration
• Microsoft Teams if you already live in Microsoft 365
• Doxy.me if privacy simplicity matters more than polished coaching features

High-end executive coaching firm with cohorts/groups

• Microsoft Teams or Zoom with:
  • waiting rooms/lobbies
  • MFA required for hosts
  • disabled recordings by default
  • controlled file sharing
  • retention policies

Clients from regulated industries (healthcare, finance, government, legal)

• Ask clients what compliance language they require.
• Some will care more about SOC 2, ISO 27001, encryption, data residency, or contractual confidentiality than HIPAA specifically.

Also secure the “around the call” data

The video platform is only one piece. For coaching notes, assessments, and client records, consider:

• A dedicated encrypted client management system rather than personal Google Drive/Dropbox
• Separate client folders with least-privilege access
• MFA everywhere
• A written retention/deletion policy
• No unapproved AI meeting transcription tools

A practical setup for many executive coaches is:

• Video: Zoom/Teams with enterprise controls
• Scheduling: a privacy-conscious scheduler
• Notes: encrypted coaching CRM or secure document platform
• Contracts: e-signature platform with audit trails

If you tell me your approximate setup (solo vs firm, number of clients, group size, whether you record sessions, and whether clients are in healthcare/finance/government), I can narrow this to 2–3 best fits.

Yes. If by “HIPAA-like” you mean strong confidentiality, encryption, access controls, auditability, and contractual privacy commitments, there are several good options. You don't necessarily need HIPAA compliance legally—executive coaching generally isn't automatically subject to HIPAA—but using a HIPAA-capable platform is a sensible security benchmark.

My shortlist

Microsoft Teams is probably my first choice for your use case. Microsoft says Teams supports HIPAA-related compliance requirements and provides encryption in transit/at rest, MFA, auditing and other enterprise controls. learn.microsoft.com Teams also supports optional end-to-end encryption for particularly sensitive meetings, although E2EE disables some features such as transcription/recording. learn.microsoft.com

Zoom is probably the easiest choice if you want a polished coaching experience with minimal administrative overhead. Zoom offers a BAA for customers who need one and describes its HIPAA-supporting controls, including SOC 2 + HITRUST reporting. www.zoom.com

Google Meet/Workspace is also credible. Google's current HIPAA documentation specifically lists Meet, Gmail, Drive, Calendar, Chat and other Workspace products as covered functionality under its HIPAA Business Associate Addendum. workspace.google.com

For an executive-coaching practice, I'd configure it this way

Video: Teams or Zoom
Client documents: OneDrive/SharePoint or Google Drive—not personal Dropbox folders
Scheduling: Microsoft/Google calendar with minimal client information in event titles
Notes: Encrypted business workspace, with client identifiers minimized
Authentication: MFA everywhere, preferably authenticator/passkeys rather than SMS
Meetings: Unique meeting links, waiting room/lobby, authenticated participants, host controls
Recording: Off by default. If you record, have a very explicit retention/deletion policy and obtain appropriate client consent.
AI transcription: Be particularly cautious. Don't automatically feed confidential coaching conversations into an AI note-taking service unless you've vetted its data handling and contractual terms.

One important distinction: “HIPAA compliant” isn't a certification that magically makes your practice HIPAA compliant. Microsoft explicitly notes that having a BAA doesn't by itself make an organization HIPAA compliant; your configuration and processes matter too. learn.microsoft.com

My recommendation

If you're a solo executive coach or small practice, I'd choose:

🥇 Teams + Microsoft 365 — strongest all-around privacy/security ecosystem
🥈 Zoom + a separate secure document system — best pure coaching/video experience
🥉 Google Workspace + Meet — excellent if you're already a Google shop

If you tell me (1) whether you record sessions, (2) whether clients share health/mental-health information, (3) whether you need AI transcription/notes, and (4) your approximate monthly budget, I can narrow this to 2–3 specific plans and the exact privacy/security settings I'd use.

For an executive coach, the key distinction is that you may not need HIPAA compliance legally unless you handle protected health information (PHI) or work as a business associate for a covered entity. But if you want “HIPAA-like” privacy—strong confidentiality, controlled access, secure 1:1 sessions, and private group calls—you should evaluate platforms using HIPAA-grade criteria: encryption, a signed BAA (if relevant), admin controls, audit logs, recording controls, and data retention settings. www.hhs.govmedcurity.com

Here are platforms that are commonly suitable:

For your use case, I’d typically narrow it like this:

Best overall for an executive coach

Zoom + a business account + disciplined privacy settings

• Separate meeting IDs for client types
• Waiting room enabled
• No automatic recording
• Disable AI/transcription features unless you have a clear privacy policy
• Require authentication for sensitive groups

Best if you already live in Microsoft 365

Microsoft Teams

• Particularly attractive if you store client notes, documents, or scheduling data in Microsoft’s ecosystem.

Best “HIPAA-like” minimalist setup

doxy.me

• Good if your practice style resembles therapy/coaching sessions and you value a simple client join experience.

Beyond video, remember that the client data ecosystem matters as much as the call platform:

• Avoid storing coaching notes in ordinary consumer cloud drives.
• Use MFA everywhere.
• Encrypt devices.
• Have a written privacy policy and client confidentiality agreement.
• Be cautious with AI meeting summaries/transcripts because they create another copy of sensitive information.

If you tell me:

1. whether your clients are executives at companies or private individuals,
2. whether you need group cohorts (10–100 people) or small groups, and
3. whether you need recordings/transcripts,

I can narrow this to a short list and recommended setup.