ChatGPT answers, unedited

Yes. For an executive-coaching practice, I’d look for platforms that can support HIPAA-level safeguards even if HIPAA itself doesn’t legally apply to your coaching business. The key distinction is that “encrypted” or “secure” alone isn’t enough—you want contractual commitments, administrative controls, appropriate retention settings, and ideally a Business Associate Agreement (BAA) if you may handle actual PHI.

My shortlist

Zoom would probably be my first choice for you. Zoom explicitly offers BAAs and controls intended to support HIPAA-compliant programs, including its healthcare offering. Zoom Zoom

Teams is also strong: Microsoft says Teams supports HIPAA-related compliance, but the important caveat is that you need the appropriate Microsoft 365 service and configuration rather than assuming a standalone/free Teams account is sufficient. Microsoft Support Microsoft Learn

What I'd configure for executive coaching

Regardless of platform, I'd make these defaults:

• Unique meeting ID/link per client or session, rather than one permanent meeting room.
• Waiting room/lobby enabled.
• Meeting passcode required.
• Only host can admit participants or share screen unless explicitly enabled.
• No automatic cloud recording.
• If sessions must be recorded, establish a defined retention/deletion policy and secure storage.
• Disable or carefully govern AI meeting assistants, transcription, summaries, and automated notes unless you have specifically evaluated where that data goes and what contractual protections apply.
• Use MFA on your coach/admin account.
• Keep client notes and sensitive coaching records in a separate system designed for sensitive information rather than casually storing them in meeting-chat histories.
• Have a written privacy/data-retention policy and client agreement explaining what you collect, where it's stored, who can access it, and how long you retain it.

One particularly important point: HIPAA compliance isn't a certification that a video platform simply possesses. Zoom itself notes that there is no regulatory-backed “HIPAA certified” designation; rather, it provides a BAA and security controls that can help customers meet their HIPAA obligations. Zoom

For your specific use case

I'd rank them:

1. Zoom — easiest combination of polished 1:1 coaching experience, reliable group sessions, waiting rooms, access controls, and healthcare/privacy infrastructure.

2. Microsoft Teams — potentially better if your practice already runs on Microsoft 365 and you want meetings, files, identity, and administrative controls under one ecosystem.

3. Google Meet — attractive if your practice is already built around Google Workspace.

4. Webex — very capable, particularly where enterprise security/compliance is the priority, though potentially more infrastructure than a solo executive coach needs.

If you tell me whether you're a solo coach or have a team, whether you need session recording/transcription, and whether clients ever disclose actual medical/mental-health information, I can narrow this to the 2–3 best platforms and the exact plan/configuration I'd use.

For an executive coach, you may not legally be a HIPAA-covered provider, but if your clients share health-adjacent information (burnout, mental health, disability, medical issues, family matters, etc.), it is reasonable to look for HIPAA-like privacy controls. The key question is less “Is this platform HIPAA compliant?” and more:

• Will the vendor sign a Business Associate Agreement (BAA) (if HIPAA applies)?
• Are sessions encrypted?
• Are recordings disabled or tightly controlled?
• Are access logs, admin controls, and authentication available?
• Does the platform fit 1:1 confidential coaching and group executive sessions?

A platform can be secure but still not be appropriate if you configure it poorly. Medcurity

Strong options to consider

HHS.gov PoliWriter## My shortlist for an executive coach

Best overall for executive coaching

Zoom with a properly secured paid account

• Best client familiarity
• Strong for: - 1:1 coaching
• leadership groups
• workshops
• breakout exercises
• screen sharing
• Configure: - waiting room enabled
• meeting passwords
• host-only recording
• no automatic cloud recordings unless you have a clear retention policy

Best if you already use Microsoft

Microsoft Teams

• Particularly good if your clients are corporate executives.
• Easier to align with enterprise security expectations.

Best “therapy-level privacy” feel for private clients

Doxy.me

• A good choice if your practice is mostly confidential 1:1 conversations and you want a healthcare-style experience.

Don’t forget the rest of your stack

Video is only one piece. For sensitive coaching data, also evaluate:

• Scheduling: avoid exposing client names or sensitive notes in public calendar descriptions.
• Client notes: use encrypted, access-controlled storage rather than ordinary documents.
• Email: consider a business email provider with strong security controls.
• AI meeting summaries: be very careful—many AI transcription tools create a new copy of sensitive information.
• Recordings: decide whether you need them at all; if yes, define retention and deletion rules.

A practical setup for many executive coaches would be:

• Video: Zoom or Teams (secure configuration)
• Scheduling: secure business calendar
• Notes: encrypted coaching CRM or secure document system
• No session recording by default
• Signed confidentiality agreement with clients

If you tell me:

1. whether you record sessions,
2. typical group size (e.g., 5 people vs 50+), and
3. whether your clients are mostly individuals or corporate-sponsored executives,

I can narrow this to a recommended stack.

Yes. If by “HIPAA-like privacy” you mean strong confidentiality, encryption, access controls, minimal data exposure, and ideally a vendor willing to sign a BAA, I’d narrow the field considerably.

One important distinction: HIPAA compliance is not the same thing as being private, and you may not actually be a HIPAA-covered entity as an executive coach. But using a HIPAA-capable platform is a sensible privacy benchmark for sensitive coaching conversations.

My shortlist

1. SimplePractice — probably the easiest choice

SimplePractice is particularly interesting for a solo executive coach because it combines secure client records, messaging, scheduling, forms, and video rather than making you assemble a stack.

It explicitly supports HIPAA compliance and a BAA, and its telehealth supports group sessions of up to 15 participants. SimplePractice SimplePractice SimplePractice Support

simplepractice.com

I'd choose it if: you want one system for client intake → scheduling → notes → 1:1 calls → group calls → secure client communication.

Potential downside: It is designed around healthcare/therapy workflows, so it can feel heavier than necessary for executive coaching.

2. Microsoft Teams — excellent if you're already in Microsoft 365

Teams can be configured for HIPAA-regulated environments when you're using an appropriate Microsoft 365 offering and have the necessary contractual/compliance configuration. A 2026 review identifies Microsoft Teams Business/Enterprise as capable of HIPAA-compliant use with a BAA. HIPAA Vault

microsoft.com

I'd choose it if: your clients are executives at companies already using Microsoft 365. It gives you a very natural corporate experience and excellent group-call functionality.

The caveat is important: don't assume “Teams = HIPAA.” The specific Microsoft plan, configuration, permissions, retention policies, recordings, transcription/AI features, and BAA matter.

3. Google Workspace + Google Meet

Similarly, Google Workspace can be configured for HIPAA use with the appropriate plan and BAA; consumer Google accounts/Meet aren't equivalent. HIPAA Vault

workspace.google.com

I'd choose it if: you're already heavily invested in Gmail, Drive, Calendar and Google Docs and want a coherent ecosystem.

Again, configure it deliberately rather than assuming the default settings are sufficiently private.

4. Zoom for Healthcare

Zoom is a strong choice if video conferencing is the centerpiece of your practice. The important distinction is between the ordinary consumer/business Zoom offering and Zoom's healthcare offering; the latter is the relevant one for HIPAA-style requirements. HIPAA Vault

zoom.com

I'd choose it if: you run lots of executive groups, workshops, or coaching cohorts and want a polished video experience rather than a full practice-management system.

5. Hushmail — very good companion for sensitive email

Hushmail isn't my pick for the actual group calls, but it is worth considering for sensitive client communications, forms, and attachments.

Its healthcare offering provides encrypted email, secure forms, e-signatures, archiving and a BAA. Hushmail Hushmail

hushmail.com

What I'd actually build for an executive-coaching practice

For your use case, I'd rank the approaches:

Simplest:
SimplePractice alone → client records + secure messaging + 1:1 + groups.

Best corporate/executive experience:
Microsoft 365 + Teams → particularly compelling when clients already use Microsoft.

Best video experience:
Zoom's healthcare offering + a separate secure client-record system.

Privacy-focused communication stack:
Secure video platform + Hushmail for email/forms + encrypted/controlled document storage.

The features I'd insist on

Regardless of vendor, I'd want:

• A signed BAA if you're using HIPAA as your benchmark.
• Encryption in transit and at rest.
• MFA and strong administrative access controls.
• Waiting rooms/admission controls for group calls.
• Ability to disable or tightly control recording, transcripts and AI meeting summaries.
• Clear retention/deletion policies.
• No vendor use of your client conversations for model training or advertising.
• Audit/access logs.
• Secure file sharing rather than ordinary email attachments.
• A clear process for terminating a client relationship and deleting/exporting their data.
• Separate accounts/devices from your personal communications where practical.

One particularly important point for executive coaching: recordings and AI transcripts can turn a relatively low-risk coaching platform into a much more sensitive data repository. I'd generally make “no recording/no automatic transcription” the default, unless there is a specific reason to retain them.

If you tell me (1) roughly how many 1:1 clients you have, (2) typical group size, (3) whether you already use Google Workspace or Microsoft 365, and (4) whether you need client notes/forms, I can narrow this to the best 2–3 setups and compare their current pricing, BAA terms, recording/AI controls, and privacy architecture.

SimplePractice is particularly interesting for a solo executive coach because it combines secure client records, messaging, scheduling, forms, and video rather than making you assemble a stack.

It explicitly supports HIPAA compliance and a BAA, and its telehealth supports group sessions of up to 15 participants. SimplePractice SimplePractice SimplePractice Support

simplepractice.com

I'd choose it if: you want one system for client intake → scheduling → notes → 1:1 calls → group calls → secure client communication.

Potential downside: It is designed around healthcare/therapy workflows, so it can feel heavier than necessary for executive coaching.

2. Microsoft Teams — excellent if you're already in Microsoft 365

Teams can be configured for HIPAA-regulated environments when you're using an appropriate Microsoft 365 offering and have the necessary contractual/compliance configuration. A 2026 review identifies Microsoft Teams Business/Enterprise as capable of HIPAA-compliant use with a BAA. HIPAA Vault

microsoft.com

I'd choose it if: your clients are executives at companies already using Microsoft 365. It gives you a very natural corporate experience and excellent group-call functionality.

The caveat is important: don't assume “Teams = HIPAA.” The specific Microsoft plan, configuration, permissions, retention policies, recordings, transcription/AI features, and BAA matter.

3. Google Workspace + Google Meet

Similarly, Google Workspace can be configured for HIPAA use with the appropriate plan and BAA; consumer Google accounts/Meet aren't equivalent. HIPAA Vault

workspace.google.com

I'd choose it if: you're already heavily invested in Gmail, Drive, Calendar and Google Docs and want a coherent ecosystem.

Again, configure it deliberately rather than assuming the default settings are sufficiently private.

4. Zoom for Healthcare

Zoom is a strong choice if video conferencing is the centerpiece of your practice. The important distinction is between the ordinary consumer/business Zoom offering and Zoom's healthcare offering; the latter is the relevant one for HIPAA-style requirements. HIPAA Vault

zoom.com

I'd choose it if: you run lots of executive groups, workshops, or coaching cohorts and want a polished video experience rather than a full practice-management system.

5. Hushmail — very good companion for sensitive email

Hushmail isn't my pick for the actual group calls, but it is worth considering for sensitive client communications, forms, and attachments.

Its healthcare offering provides encrypted email, secure forms, e-signatures, archiving and a BAA. hushmail.com hushmail.com

hushmail.com

What I'd actually build for an executive-coaching practice

For your use case, I'd rank the approaches:

Simplest:
SimplePractice alone → client records + secure messaging + 1:1 + groups.

Best corporate/executive experience:
Microsoft 365 + Teams → particularly compelling when clients already use Microsoft.

Best video experience:
Zoom's healthcare offering + a separate secure client-record system.

For an executive coach, you likely do not need HIPAA compliance unless you are handling protected health information (PHI) as a covered entity/business associate, but “HIPAA-like” privacy is a useful standard for protecting confidential coaching conversations, leadership assessments, personal disclosures, and proprietary business information.

The key features to look for are:

• Business Associate Agreement (BAA) availability (even if you are not legally required to have one, it signals mature privacy practices)
• Encryption in transit and at rest
• Strong admin controls (MFA, SSO, access logs)
• Waiting rooms/lobbies and host controls
• No automatic recording
• Secure storage for notes/files
• Data retention controls
• Clear privacy terms and no training of AI models on your client data without consent

Good options:

For your specific use case:

Best overall for an executive coach

Zoom + a secure client-management stack is probably the most practical:

• private 1:1 sessions
• group coaching cohorts
• breakout rooms
• screen sharing
• easy client onboarding
• strong meeting controls

Best if your clients are executives at large companies

Microsoft Teams may be the better choice because many corporate clients already have identity and security requirements around Microsoft 365. support.microsoft.com

Best privacy-focused operating model

Consider pairing your video platform with:

• secure client portal (for documents, assessments, recordings if any)
• encrypted notes system
• password manager
• MFA everywhere
• separate business email/domain
• written confidentiality policy

A few practices I would avoid for high-trust coaching:

• personal Zoom accounts
• free Google accounts
• WhatsApp/consumer messaging for client records
• storing recordings on a laptop
• AI meeting summaries/transcription unless you have explicitly reviewed the vendor’s data handling and obtained client consent

If you tell me (1) whether you record sessions, (2) approximate group size, (3) whether clients are mostly individuals or Fortune 500/corporate-sponsored, and (4) your budget, I can narrow this to a short list.

Yes. If by “HIPAA-like” you mean strong confidentiality, contractual data protections, encryption, access controls, and minimal retention, I’d shortlist platforms that are either healthcare-oriented or willing to sign a BAA.

One important distinction: HIPAA compliance itself may not legally apply to an executive coach unless you are handling PHI in a covered-entity/business-associate relationship. But using HIPAA-grade practices can still be a very sensible privacy standard.

My shortlist

Zoom is probably where I'd start for an executive-coaching practice. Zoom explicitly offers a BAA and has healthcare/security controls, while still giving you mature group-call functionality. www.zoom.com

Zoom security & compliance

Microsoft Teams is particularly compelling if your business already lives in Microsoft 365. Microsoft supports BAAs and has extensive compliance tooling; Teams also supports end-to-end encryption for particularly sensitive meetings, although E2EE has feature limitations. learn.microsoft.com

Microsoft Teams security & compliance

Doxy.me is unusually attractive if privacy is more important than having a polished corporate-meeting ecosystem. It's designed specifically for healthcare, offers a BAA, doesn't record video/audio calls or retain chat messages, and its Premium plan now supports group calls with up to 25 participants. helpcenter.doxy.me

Doxy.me security

SimplePractice is worth considering if you're also looking for secure client messaging, scheduling, notes, and practice-management functionality rather than just video. It explicitly markets HIPAA-compliant secure messaging and has HITRUST certification. www.simplepractice.com

SimplePractice

What I'd configure regardless of platform

For executive coaching, I'd treat these as non-negotiable:

• Don't record sessions by default.
• Disable AI transcription/summaries unless you have deliberately assessed the vendor's data practices and obtained appropriate client consent.
• Require MFA on your coach/admin account.
• Use unique meeting links or authenticated invitations rather than a permanent public meeting room.
• Enable a waiting room/lobby and host controls.
• Prevent participants from joining before you.
• Restrict screen sharing to the host unless needed.
• Establish a defined retention/deletion policy for recordings, transcripts, chat, notes, and client files.
• Keep sensitive coaching notes out of ordinary email and consumer cloud storage.
• If you're actually handling PHI, execute the vendor's BAA before putting PHI into the system—merely choosing a platform that advertises HIPAA compliance isn't sufficient. Doxy.me, for example, explicitly requires the provider to have the BAA in place for HIPAA responsibilities. helpcenter.doxy.me

My recommendation: Zoom for the best balance of executive-coaching usability and security; Doxy.me if you want the most healthcare/privacy-oriented experience and your groups are ≤25; Teams if you're already deeply invested in Microsoft 365.

If you tell me (1) typical group size, (2) whether you record/transcribe sessions, and (3) whether clients are corporate executives or individuals, I can narrow this to the best 2–3 choices and compare their privacy/data-retention terms.

Yes. For an executive-coaching practice, I’d treat “HIPAA-like” as strong contractual privacy + encryption + access controls + minimal data retention, rather than assuming HIPAA itself applies. A BAA is a useful signal of maturity, but it does not by itself make your coaching practice HIPAA-compliant. support.zoom.comlearn.microsoft.com

My shortlist

1. Zoom — my default recommendation.
Zoom explicitly offers BAAs and says its healthcare offerings support HIPAA-related privacy/security requirements. Its paid plans can have a BAA, and Zoom provides controls around recordings, AI features, meeting access, etc. support.zoom.com

For executive coaching, I'd configure Zoom so that cloud recording is off by default, participants can't join before you, passcodes are required, waiting room is enabled, screen sharing is host-controlled, and meeting links aren't reused. If you use AI meeting summaries/transcription, treat that as a separate privacy decision.

2. Microsoft Teams — strongest if you want an entire secure practice stack.
Microsoft says Teams is within its HIPAA BAA framework and supports extensive compliance/security controls. learn.microsoft.com

This becomes particularly attractive if you're also storing client notes, contracts, files, and communications in Microsoft 365. You can build a much more coherent security environment around Teams + OneDrive/SharePoint + Entra ID + Purview than by stitching together lots of consumer services.

3. Google Meet — excellent if you're already in Google Workspace.
Google offers a HIPAA Business Associate Addendum for applicable services, and Meet supports encryption in transit/at rest plus additional encryption options in certain contexts. admin.google.com

I'd choose this over Zoom if your practice already lives in Gmail, Drive, Calendar, and Workspace and you want fewer vendors.

4. Webex — worth considering for particularly security-conscious clients.
Webex is a credible enterprise alternative, especially if some of your clients work for large corporations with stringent IT/security requirements. I'd put it behind Zoom/Teams for a solo executive coach primarily because the ecosystem and client familiarity tend to matter more.

The bigger issue: your workflow

For sensitive executive-coaching conversations, the video platform is only one piece. I'd aim for something like:

Video: Zoom/Teams/Meet
Client files: encrypted business cloud storage, not personal Dropbox/iCloud
Notes: encrypted business-grade system with strict access controls
Scheduling: business account, not a personal calendar account
Email: business account with MFA and appropriate retention controls
Authentication: MFA everywhere + unique passwords/password manager
Recordings: off unless there is a compelling reason to retain them
AI transcription/summaries: opt-in only, with careful vendor/data-use review
Client access: unique meeting links or strong authentication rather than a permanent public link

One particularly important distinction: “HIPAA compliant” is not the same thing as “confidential.” For coaching, I'd be especially concerned about whether a vendor uses conversation content to train AI models, how long recordings/transcripts persist, who can administer/access them, and what happens when you delete a client.

What I'd choose

For a solo/independent executive coach:

🥇 Zoom + secure business file storage — simplest, polished client experience, strong privacy controls.

🥈 Microsoft 365 + Teams — best if you want to build a genuinely security-conscious practice around one ecosystem.

🥉 Google Workspace + Meet — excellent if you're already deeply invested in Google.

If you tell me (1) whether you're solo or have a coaching team, (2) whether you record/transcribe sessions, and (3) whether clients are mostly Fortune 500/enterprise executives, I can narrow this to the best 2–3 platforms and the exact plan/security configuration I'd use.

Yes. If by “HIPAA-like” you mean strong confidentiality, encryption, access controls, auditability, and a vendor willing to sign a BAA, there are several good choices—even though HIPAA itself generally doesn't apply to executive coaching unless you're handling regulated health information in a covered-entity/business-associate context.

My shortlist

Zoom would probably be my first choice for an independent executive coach. Zoom explicitly offers BAAs and provides controls such as waiting rooms, passcodes, meeting locking, recording restrictions, permissions, and other security configurations. support.zoom.com

Microsoft Teams is particularly compelling if your practice already uses Microsoft 365. Microsoft offers a BAA covering in-scope services, and Teams supports end-to-end encrypted meetings with up to 200 participants. learn.microsoft.com

Google Workspace/Meet is similarly strong if you're already on Google. Google offers a HIPAA Business Associate Amendment for qualifying Workspace services, but you need to actually accept it and configure your environment appropriately. knowledge.workspace.google.com

doxy.me is worth considering if you want something designed around confidential healthcare conversations rather than a general-purpose business collaboration suite. Its documentation specifically describes HIPAA-oriented security and group calls. help.doxy.me

One important distinction

Don't equate “HIPAA compliant” with “private.” A BAA is useful, but your own configuration and practices matter enormously. Even Microsoft explicitly says that having its BAA does not by itself make your organization HIPAA compliant. learn.microsoft.com

For an executive-coaching practice, I'd configure whichever platform you choose roughly like this:

• No meeting recordings by default
• Disable or tightly restrict AI transcription/summarization unless clients explicitly consent
• Require authenticated participants where practical
• Unique meeting links rather than one permanent public link
• Waiting room/lobby for sensitive sessions
• Strong passcodes
• Prevent participants from joining before you
• Lock meetings once everyone is present
• Restrict screen sharing to host unless needed
• Minimize stored chat/files/recordings
• MFA on your administrator and coach accounts
• Separate client information from ordinary email/calendar data where practical
• Have a written retention/deletion policy
• Use encrypted, access-controlled storage for coaching notes
• Have a client-facing privacy/confidentiality policy and appropriate consent language

What I'd choose

Solo executive coach: Zoom Pro/Business with the BAA and a locked-down configuration.

Coach/practice already running Microsoft 365: Teams + Microsoft 365, especially if you want centralized identity, file permissions, retention and compliance controls.

Coach already deeply invested in Google Workspace: Google Meet + Workspace, with the appropriate BAA and security configuration.

You want something that feels more like a private telehealth room: doxy.me.

If you tell me (1) solo vs. coaching firm, (2) Zoom/Google/Microsoft ecosystem you're already using, (3) whether you record/transcribe sessions, and (4) approximate number of clients, I can narrow this to the best 2–3 setups and the specific plan/configuration I'd use.

Yes. If by “HIPAA-like” you mean strong confidentiality, encryption, administrative controls, and a vendor contract that commits the provider to protecting sensitive information, I’d narrow the field considerably.

One important distinction: HIPAA compliance is not the same thing as being a secure platform, and an executive coach generally isn't automatically subject to HIPAA simply because conversations are sensitive. But using a platform that can support HIPAA-style controls is a sensible privacy standard.

My shortlist

Zoom is probably my first choice for your use case. Zoom explicitly offers a BAA and says its paid plans can be used with the BAA; its security/compliance program includes SOC 2 and HITRUST reporting. www.zoom.com

Zoom's HIPAA/security information

Microsoft Teams is particularly attractive if you want your client records, email, calendar, files, and meetings under one Microsoft 365 environment. Microsoft says Teams is among its HIPAA in-scope services and that its BAA covers eligible Microsoft services. learn.microsoft.com

Microsoft's HIPAA/Teams documentation

Google Meet is also viable if you're already on Google Workspace. Google's current HIPAA functionality specifically includes Meet, Gmail, Calendar, Drive, Chat and other Workspace components under its HIPAA Business Associate Addendum. admin.google.com

Google Workspace HIPAA information

For an executive-coaching practice, I'd configure it this way

Don't just buy a “secure” plan and assume you're done. I'd establish a privacy baseline:

• Paid business/enterprise account, not a free consumer account.
• BAA/DPA or equivalent contractual privacy agreement where appropriate.
• Unique meeting IDs rather than a permanent public meeting room.
• Passcodes + waiting room/lobby for every client meeting.
• Disable participants' ability to record unless explicitly needed.
• If you record, establish a written retention/deletion policy.
• Don't put sensitive coaching notes in meeting-chat transcripts.
• Turn off or carefully govern AI transcription, meeting summaries and AI assistants unless you've specifically reviewed their data handling.
• Require MFA for your own account.
• Use SSO/device controls if you have a team.
• Keep coaching notes in a separate secure system, rather than treating the video platform as your client-record system.
• Have a written privacy policy explaining what you collect, where it is stored, who can access it, and how long you retain it.

The recording/AI issue is especially important. For example, Zoom says that customers with a BAA have controls over AI features and states that it does not use meeting communications such as audio, video, chat and screen sharing to train its or third-party AI models. www.zoom.comsupport.zoom.com

What I'd choose

Solo executive coach:
Zoom + a secure client-management/document system is the simplest strong setup.

Coach already living in Microsoft 365:
Teams + OneDrive/SharePoint + Microsoft 365 security controls is compelling.

Coach already living in Google Workspace:
Google Meet + Drive + Workspace security controls is perfectly reasonable.

I would not choose a platform merely because its website says “encrypted” or “private.” For truly sensitive coaching, the contractual commitment, account controls, recording/transcription behavior, data retention, and access management matter at least as much as encryption.

Also, a BAA doesn't magically make your practice HIPAA compliant. HHS explicitly says that having a BAA with a cloud provider is only one part of compliance; the organization using the service still has its own obligations. www.hhs.gov

If you tell me whether you're solo or have a coaching team, whether you record sessions, and whether you use Google Workspace or Microsoft 365, I can narrow this to a concrete “best stack for an executive coach” with the specific plan/features I'd use.

Yes. If by “HIPAA-like” you mean strong privacy, contractual commitments, encryption, administrative controls, and minimal exposure of client data, there are several good choices. You don't necessarily need to be HIPAA-covered as an executive coach, but using a platform that can support HIPAA compliance is a useful privacy benchmark.

My shortlist

Zoom is probably my first choice for an executive-coaching practice. Zoom explicitly offers a BAA, and its HIPAA-oriented controls include encryption and security/compliance reporting. Importantly, Zoom says customers with BAAs can control AI features and that it doesn't use customer communications to train its AI models. www.zoom.com

Zoom security & compliance information

Microsoft Teams is particularly attractive if your practice already runs on Microsoft 365. Microsoft offers a HIPAA BAA covering in-scope services, although Microsoft explicitly notes that having the BAA alone doesn't make your organization HIPAA compliant. learn.microsoft.comwww.zoom.com

Microsoft HIPAA compliance documentation

Google Workspace/Meet is similarly compelling if you're a Google Workspace shop. Google provides a HIPAA Business Associate Amendment that administrators can accept for eligible Workspace services. knowledge.workspace.google.com

VSee deserves a serious look if privacy is more important than having the most familiar business-meeting experience. VSee offers encrypted 1:1 and group video, secure messaging, waiting rooms and a BAA; its current Clinic offering specifically supports both individual and group calls. vsee.com

VSee Clinic

doxy.me is another privacy-oriented option, particularly if you want something designed around confidential client/healthcare conversations rather than general-purpose corporate meetings. It describes its service as being built around HIPAA security/privacy and offers BAAs. Its group-call capabilities are available on appropriate plans. helpcenter.doxy.me

What I'd choose for an executive coach

Best overall: Zoom + a signed BAA + carefully configured privacy settings.

You get:

• polished client experience
• excellent 1:1 and group meetings
• waiting rooms
• strong host controls
• screen sharing
• recording controls
• familiar interface for executives
• contractual BAA option
• relatively mature security/compliance program

Best privacy-first alternative: VSee.

I'd consider VSee if your clients routinely discuss extremely sensitive personal, employment, financial, or leadership information and you want the platform itself to be more explicitly oriented toward confidential/clinical communications.

The bigger issue: the platform isn't the whole privacy system

For your use case, I'd evaluate the entire data flow, not just video encryption. In particular:

1. BAA/DPA/contractual privacy terms — even if HIPAA technically doesn't apply to you.
2. AI/transcription — turn off meeting AI, automated summaries, transcription, and similar features unless you have explicitly vetted where that data goes.
3. Recording — preferably off by default.
4. Cloud recordings — if you record, establish retention/deletion rules and restrict access.
5. Waiting rooms/admission controls — especially for group sessions.
6. Participant identity — don't allow anonymous attendees into sensitive group conversations.
7. Client notes — keep coaching notes out of the video platform unless you've specifically evaluated its storage/security.
8. Email/calendar — meeting invitations can themselves reveal sensitive information.
9. File sharing/chat — decide whether clients should be permitted to exchange sensitive documents through the platform.
10. Your own devices — full-disk encryption, strong passwords, MFA, automatic updates and separate work accounts matter enormously.

One important distinction: “HIPAA compliant” isn't a magic security certification. Zoom and Microsoft both explicitly explain that a BAA supports compliance but doesn't by itself make the customer HIPAA compliant. learn.microsoft.comwww.zoom.com

If you tell me (a) whether you're solo or have a coaching team, (b) whether you need recording/transcription, and (c) whether you already use Google Workspace, Microsoft 365, or Zoom, I can narrow this to the 2–3 best setups and the specific privacy configuration I'd use for an executive-coaching practice.

Yes. For an executive-coaching practice handling highly sensitive personal, professional, or organizational information, I’d prioritize contractual privacy commitments, strong encryption, admin controls, auditability, and control over recordings/data retention—not merely whether a platform advertises itself as “secure.”

My shortlist

Zoom, Microsoft Teams, Google Meet and Webex can all be configured for HIPAA-related use under appropriate plans/agreements; the important distinction is that the free/consumer version isn't equivalent to the appropriately contracted business version. www.hipaavault.comwww.zoom.com

What I'd choose for an executive coach

1. Zoom — probably my first choice.

For coaching specifically, Zoom has a nice balance of ease for clients and sophisticated controls for you. Zoom says it will enter into a BAA for customers who need one and provides security/compliance documentation, including SOC 2 + HITRUST reporting. www.zoom.com

I'd configure it with:

• Waiting room
• Passcode required
• Authenticated participants where practical
• No automatic cloud recording
• Recording disabled by default unless explicitly needed
• Restrict screen sharing to host
• Disable participant file transfer/chat if you don't need them
• Keep meeting links unique rather than using a permanent personal meeting room
• Strong account-level admin/security settings

For group coaching, Zoom is particularly convenient because clients generally already know how to use it.

2. Microsoft Teams — best if you want everything under one secure business account.

If you're already using Microsoft 365 for email, documents and calendars, Teams is compelling. Microsoft provides a HIPAA BAA for eligible services, while emphasizing that the BAA itself doesn't magically make an organization compliant—you still have to configure and operate the environment appropriately. learn.microsoft.com

Teams is especially attractive if your coaching practice involves corporate clients, because you can build a more controlled Microsoft 365 environment around your coaching work.

3. Webex — excellent if security is more important than simplicity.

Cisco's Webex platform offers strong encryption, administrative controls, data-residency options, retention/eDiscovery capabilities and HIPAA-related compliance support. www.webex.com

I'd consider it if your clients include executives at heavily regulated companies or organizations with their own security requirements.

4. Google Meet — very good if you're already a Google Workspace practice.

Google currently lists Meet among the functionality covered by its HIPAA Business Associate Addendum, along with Gmail, Drive, Calendar and other Workspace services. workspace.google.com

The advantage is having your email + calendar + documents + video + storage inside one managed environment.

One important distinction

“HIPAA-like privacy” isn't the same thing as HIPAA compliance.

If you're an executive coach rather than a HIPAA-covered healthcare provider/business associate, you generally don't need to make your business legally HIPAA compliant merely because conversations are confidential. But you can adopt HIPAA-style practices as a very good privacy baseline.

Also, a BAA is not a magic security certificate. HHS specifically explains that a cloud provider handling ePHI needs an appropriate BAA and the organization has its own compliance/security responsibilities. www.hhs.gov

I'd build your stack like this

For a solo/small executive-coaching practice, I'd lean toward:

Zoom + Microsoft 365 or Google Workspace + encrypted password manager + encrypted client-document storage

And I'd establish a simple policy:

Don't put sensitive coaching notes in the video platform's chat, don't record sessions unless necessary, and don't let the video platform become the permanent repository for client information.

That last point matters enormously. A highly secure video call can still create a privacy problem if you automatically generate recordings, transcripts, AI summaries, meeting-chat histories, or searchable cloud notes.

If you tell me (1) roughly how many clients you have, (2) whether you record/transcribe sessions, and (3) whether clients are mostly individuals or corporate executives, I can narrow this to the best 2–3 platforms and the exact privacy configuration I'd use for a coaching practice.

Yes. If by “HIPAA-like” you mean strong confidentiality, a contractual privacy commitment, encryption, access controls, auditability, and the ability to keep sensitive coaching information out of ordinary consumer accounts, I’d focus on enterprise platforms that can actually execute a BAA or comparable data-processing/security agreement.

My shortlist

1. Zoom Workplace — my first choice

Zoom explicitly supports HIPAA programs through a Business Associate Agreement, and its paid plans can be placed under a BAA. It also provides security controls such as waiting rooms, passcodes, meeting locks and administrative controls. www.zoom.comsupport.zoom.com

For an executive coach, this is attractive because you can have:

• private 1:1 sessions
• recurring private client meetings
• secure group coaching
• waiting rooms/admission controls
• controlled recording
• administrative policies
• a single familiar experience for clients

One particularly important point: Zoom says that, under its BAA arrangements, customer communications aren't used to train Zoom's or third-party AI models. www.zoom.comsupport.zoom.com

Zoom's HIPAA/BAA information

2. Microsoft Teams — best for a full business stack

Teams is compelling if you want secure video + email + calendar + document storage + messaging + permissions rather than just a meeting platform.

Microsoft says Teams is included within its HIPAA-supported services and that Microsoft offers a BAA for applicable customers/services. support.microsoft.comlearn.microsoft.com

For a coaching practice, Microsoft 365 can give you a fairly comprehensive secure environment for:

client call → calendar → client documents → internal notes → email → file sharing

That's a major advantage if you're trying to avoid sensitive information being scattered across five different SaaS products.

Microsoft's HIPAA compliance documentation

3. Google Workspace + Meet — excellent alternative

Google Workspace is another strong choice if you prefer Gmail, Calendar and Drive.

Google's current HIPAA Included Functionality specifically lists Google Meet, Gmail, Drive, Calendar, Chat and other Workspace services, provided the applicable HIPAA agreement is accepted. knowledge.workspace.google.com

This can be particularly convenient for an independent coach because everything can live under one managed business Workspace rather than personal Gmail/Drive accounts.

Google's HIPAA Workspace guidance

What I'd choose for an executive-coaching practice

If your primary concern is confidential conversations:
→ Zoom Workplace + a properly executed BAA

If you want to build a whole secure practice infrastructure:
→ Microsoft 365 + Teams

If you're already deeply invested in Gmail/Drive/Calendar:
→ Google Workspace + Meet

The important caveat is that “HIPAA compliant” doesn't mean the platform magically makes your coaching practice HIPAA compliant. Even Microsoft explicitly says that having its BAA doesn't by itself make your organization compliant. support.microsoft.comlearn.microsoft.com

The bigger issue: don't just secure the video call

For coaching, I'd evaluate the entire client-data workflow, not just video:

1. Video: BAA/DPA, encryption, meeting controls, recording policy.
2. Notes: encrypted business storage—not personal Notes, Dropbox, etc.
3. AI transcription: ideally off by default unless you've specifically vetted the AI provider and its data practices.
4. Recordings: preferably disabled by default; if enabled, define retention/deletion rules.
5. Email: business-managed account, MFA, appropriate encryption/security controls.
6. File sharing: managed business accounts, no “anyone with the link.”
7. Client intake: secure forms rather than ordinary web forms.
8. Access: MFA + unique accounts + least-privilege permissions.
9. Offboarding: immediately revoke access when a contractor/employee leaves.
10. Retention: establish how long you actually retain coaching notes and recordings.

One especially important distinction: executive coaching isn't automatically subject to HIPAA simply because clients may discuss health, stress, medication, or other sensitive matters. HIPAA applies to particular covered entities/business associates and PHI relationships. support.microsoft.comlearn.microsoft.com So I'd treat HIPAA-level security as a design standard, rather than assuming you legally need HIPAA compliance.

If you tell me (a) whether you're a solo coach or have a team, (b) whether you record/transcribe sessions, and (c) whether you need a secure client portal/intake/forms in addition to video, I can narrow this to a specific stack and plan rather than just a meeting-platform recommendation.

For an executive coach handling sensitive 1:1 conversations, confidential business issues, assessments, or potentially health-adjacent information, I’d look for platforms that provide HIPAA-like controls even if you are not legally a HIPAA-covered entity. The key features are:

• A Business Associate Agreement (BAA) or equivalent contractual privacy commitment (if you need HIPAA-level handling)
• Encryption in transit and at rest
• Admin controls, MFA, audit logs
• No automatic recording or AI transcription unless explicitly enabled and protected
• Data residency/control options if clients require them
• Strong privacy terms for client notes, files, and recordings

A few strong options:

My shortlist by coaching model

Solo executive coach (mostly 1:1 + occasional small groups)

• Zoom on an appropriate business/healthcare configuration
• Microsoft Teams if you already live in Microsoft 365
• Doxy.me if privacy simplicity matters more than polished coaching features

High-end executive coaching firm with cohorts/groups

• Microsoft Teams or Zoom with:
  • waiting rooms/lobbies
  • MFA required for hosts
  • disabled recordings by default
  • controlled file sharing
  • retention policies

Clients from regulated industries (healthcare, finance, government, legal)

• Ask clients what compliance language they require.
• Some will care more about SOC 2, ISO 27001, encryption, data residency, or contractual confidentiality than HIPAA specifically.

Also secure the “around the call” data

The video platform is only one piece. For coaching notes, assessments, and client records, consider:

• A dedicated encrypted client management system rather than personal Google Drive/Dropbox
• Separate client folders with least-privilege access
• MFA everywhere
• A written retention/deletion policy
• No unapproved AI meeting transcription tools

A practical setup for many executive coaches is:

• Video: Zoom/Teams with enterprise controls
• Scheduling: a privacy-conscious scheduler
• Notes: encrypted coaching CRM or secure document platform
• Contracts: e-signature platform with audit trails

If you tell me your approximate setup (solo vs firm, number of clients, group size, whether you record sessions, and whether clients are in healthcare/finance/government), I can narrow this to 2–3 best fits.

Yes. If by “HIPAA-like” you mean strong confidentiality, encryption, access controls, auditability, and contractual privacy commitments, there are several good options. You don't necessarily need HIPAA compliance legally—executive coaching generally isn't automatically subject to HIPAA—but using a HIPAA-capable platform is a sensible security benchmark.

My shortlist

Microsoft Teams is probably my first choice for your use case. Microsoft says Teams supports HIPAA-related compliance requirements and provides encryption in transit/at rest, MFA, auditing and other enterprise controls. learn.microsoft.com Teams also supports optional end-to-end encryption for particularly sensitive meetings, although E2EE disables some features such as transcription/recording. learn.microsoft.com

Zoom is probably the easiest choice if you want a polished coaching experience with minimal administrative overhead. Zoom offers a BAA for customers who need one and describes its HIPAA-supporting controls, including SOC 2 + HITRUST reporting. www.zoom.com

Google Meet/Workspace is also credible. Google's current HIPAA documentation specifically lists Meet, Gmail, Drive, Calendar, Chat and other Workspace products as covered functionality under its HIPAA Business Associate Addendum. workspace.google.com

For an executive-coaching practice, I'd configure it this way

Video: Teams or Zoom
Client documents: OneDrive/SharePoint or Google Drive—not personal Dropbox folders
Scheduling: Microsoft/Google calendar with minimal client information in event titles
Notes: Encrypted business workspace, with client identifiers minimized
Authentication: MFA everywhere, preferably authenticator/passkeys rather than SMS
Meetings: Unique meeting links, waiting room/lobby, authenticated participants, host controls
Recording: Off by default. If you record, have a very explicit retention/deletion policy and obtain appropriate client consent.
AI transcription: Be particularly cautious. Don't automatically feed confidential coaching conversations into an AI note-taking service unless you've vetted its data handling and contractual terms.

One important distinction: “HIPAA compliant” isn't a certification that magically makes your practice HIPAA compliant. Microsoft explicitly notes that having a BAA doesn't by itself make an organization HIPAA compliant; your configuration and processes matter too. learn.microsoft.com

My recommendation

If you're a solo executive coach or small practice, I'd choose:

🥇 Teams + Microsoft 365 — strongest all-around privacy/security ecosystem
🥈 Zoom + a separate secure document system — best pure coaching/video experience
🥉 Google Workspace + Meet — excellent if you're already a Google shop

If you tell me (1) whether you record sessions, (2) whether clients share health/mental-health information, (3) whether you need AI transcription/notes, and (4) your approximate monthly budget, I can narrow this to 2–3 specific plans and the exact privacy/security settings I'd use.

For an executive coach, the key distinction is that you may not need HIPAA compliance legally unless you handle protected health information (PHI) or work as a business associate for a covered entity. But if you want “HIPAA-like” privacy—strong confidentiality, controlled access, secure 1:1 sessions, and private group calls—you should evaluate platforms using HIPAA-grade criteria: encryption, a signed BAA (if relevant), admin controls, audit logs, recording controls, and data retention settings. www.hhs.govmedcurity.com

Here are platforms that are commonly suitable:

For your use case, I’d typically narrow it like this:

Best overall for an executive coach

Zoom + a business account + disciplined privacy settings

• Separate meeting IDs for client types
• Waiting room enabled
• No automatic recording
• Disable AI/transcription features unless you have a clear privacy policy
• Require authentication for sensitive groups

Best if you already live in Microsoft 365

Microsoft Teams

• Particularly attractive if you store client notes, documents, or scheduling data in Microsoft’s ecosystem.

Best “HIPAA-like” minimalist setup

doxy.me

• Good if your practice style resembles therapy/coaching sessions and you value a simple client join experience.

Beyond video, remember that the client data ecosystem matters as much as the call platform:

• Avoid storing coaching notes in ordinary consumer cloud drives.
• Use MFA everywhere.
• Encrypt devices.
• Have a written privacy policy and client confidentiality agreement.
• Be cautious with AI meeting summaries/transcripts because they create another copy of sensitive information.

If you tell me:

1. whether your clients are executives at companies or private individuals,
2. whether you need group cohorts (10–100 people) or small groups, and
3. whether you need recordings/transcripts,

I can narrow this to a short list and recommended setup.