The video platform you use for telehealth is a clinical decision, not just a technology preference. It must be secure, compliant with the law in your clients' jurisdiction, reliable enough for live sessions, and easy enough for clients to use without a download barrier. In 2026, the good news is that several solid options exist for both HIPAA and GDPR-compliant practice.
What compliance means for video platforms
HIPAA (US clients): requires a Business Associate Agreement (BAA) signed with the platform. Consumer Zoom, FaceTime, Google Meet (personal), and Skype do not provide BAAs and are not appropriate for clinical use.
GDPR (EU clients): requires a Data Processing Agreement (DPA), data processing in GDPR-compliant infrastructure, and lawful basis for processing. Platforms must be willing to enter a DPA and must handle EU data appropriately.
Comparison of major platforms in 2026
| Platform | HIPAA (BAA) | GDPR (DPA) | No download needed | Free tier |
|---|
|---|---|---|---|---|
| Doxy.me | ✓ | ✓ | ✓ | ✓ |
|---|---|---|---|---|
| Whereby | ✓ | ✓ | ✓ | ✓ (limited) |
| Google Meet (Workspace) | ✓ with BAA | ✓ with DPA | ✓ | ✗ |
| Telehealth by SimplePractice | ✓ | Limited | ✓ | Included in SP |
| VSee | ✓ | ✓ | ✓ | ✓ |
Standard consumer Zoom, FaceTime, standard Google Meet, and Skype are not appropriate for clinical telehealth — they don't sign BAAs or DPAs.
What matters most in practice
No download for clients: platforms that require a client to install an app create friction, missed sessions, and tech support calls. Doxy.me, Whereby, and VSee all work in-browser — a significant practical advantage.
Connection stability: the most compliant platform is useless if it drops connections. Test your chosen platform on your typical internet connection and have a backup plan (phone call) documented in your consent form.
International access: some platforms are blocked in certain countries (Zoom is restricted in some regions). If you serve clients in diverse locations, confirm the platform is accessible in their country.
The backup protocol
Every telehealth consent form should include what happens if the video connection fails. A simple protocol: if the session drops, you will call the client's provided phone number within 5 minutes. Documenting this isn't bureaucracy — it's what clients need to feel secure in an online relationship.
The bottom line
For most solo therapists, Doxy.me (free, no download, BAA + DPA available) is the easiest starting point. For established practices wanting deeper practice management integration, Zoom for Healthcare or your EHR's built-in telehealth function are strong options.
See also: The Complete Tech Stack for Online Therapists in 2026.