HIPAA-Compliant Website Chat for Therapists: What to Check
Many people looking for a therapist would rather type than call, and a chat box on the practice website catches them at the moment they're deciding. Most website chat tools weren't built for health information, so the setup matters. We make one of the products on this list, so here is the disclosure up front: Stable is included.
Short answer
HIPAA-compliant website chat for a therapy practice runs on a vendor that signs a BAA covering chat, keeps transcripts protected, answers at any hour, hands crisis messages to a person or 988, and passes conversations to staff with the history. Options include Stable, whose AI answers website chat in the same inbox as calls and texts; OhMD and Luma Health, which include web chat; and Ruby's managed live chat.
What to check
- A BAA that covers chat. General marketing chat widgets often don't offer one.
- What the chat asks for. Collect what's needed to help, and no more.
- Crisis messages, which do arrive by chat.
- After hours, when most website visitors browse.
- Handoff, into the same place your team handles calls and texts.
The options, by name
| Option | Who answers | Where chats go | BAA |
|---|---|---|---|
| Stable | AI, then your team | Shared inbox with calls and texts | Signs a BAA |
| OhMD | Staff or AI agents | One inbox | Standard BAA in all agreements |
| Luma Health | AI web chat | Luma platform | Ask |
| Ruby | Live chat agents | Ruby | Ask |
| General website chat widgets | Varies | Vendor dashboard | Often none |
Vendor details checked against vendor websites and published materials on November 4, 2026. Products change quickly; confirm specifics, including BAA scope, with each vendor before deciding.
Where Stable fits
Stable's AI front desk answers calls, texts, and website chat 24/7 in English and Spanish, matches patients to clinicians by concern and insurance panel, books into your EHR or collects the request for your team, fills openings from your waitlist, reads referral faxes, and transfers crisis calls to the number your practice provides, such as your on-call clinician, or to 988. Everything lands in a shared patient inbox with an owner and next step, and it signs a BAA.
Frequently asked questions
Is website chat HIPAA compliant?
It can be, if the vendor signs a BAA covering chat and protects transcripts. Many general chat widgets don't.
Should a therapy practice have website chat?
If prospective clients browse after hours, chat that answers immediately can turn a visit into an inquiry.
What happens if someone in crisis uses the chat?
It should go to a person or 988 immediately. Stable transfers crisis contacts to your on-call number or 988.
Website visitors answered, any hour.
See Stable answer a website chat and hand it to your team with the history.
Book a Demo