One switch turns on the safeguards a practice needs for patient information: encrypted-only delivery, secure messages for patients, patient-data checks on outgoing mail and two-factor for every member of staff.
Most practices searching for HIPAA compliant email want the same few things: patient information that never travels unencrypted, a safe way to send results to a patient, staff who cannot accidentally mail a record number to the wrong person, and a record of who accessed what.
In WS Mail those are not separate add-ons to configure one by one. HIPAA mode in the admin console turns them on together and keeps them on, so a single setting cannot quietly be switched off by someone later.
Software is one part of HIPAA compliance. Your risk analysis, policies, staff training and agreements with vendors are the rest, and are yours to keep. What email can do is make the safe way to handle patient information the default way.
Mail leaves only over an encrypted connection. If a recipient’s server cannot accept one, the message is not sent in the clear — the sender gets a bounce saying so.
The lock in the composer sends a private link instead of the message. The patient confirms a code and reads it on a secure page; you see when it was opened and can revoke it.
Medical record numbers, Social Security numbers and dates of birth are caught before they leave. Warn the sender, send it securely, or block it.
Checked by the server at every sign-in, with an authenticator app or a code to a confirmed email, and recovery codes for when a phone is lost.
Messages with links on phishing blocklists, and mail spoofing a domain, go to a quarantine only the administrator sees.
Sign-ins with IP and device, file access, data-loss checks and secure-message opens in one exportable audit log (Enterprise).
A tamper-evident copy of every message, kept even after it is deleted, with legal hold and eDiscovery export (Enterprise).
HIPAA mode also stops auto-forwarding to personal addresses, blocks executable attachments, keeps mail details off phone notifications and switches off mail apps that bypass these checks.
HIPAA mode, secure patient messages, patient-data checks, encrypted-only delivery and phishing quarantine are on every plan. Starter adds Outlook and Apple Mail access at $1 a user a month; Professional adds AI assistance at $3.50; Enterprise adds the full audit log and the compliance archive at $6. Annual billing gives two months free.
Mail that only travels encrypted, a safe way to send patient information to people outside the practice, a check that stops staff mailing patient identifiers by accident, two-factor sign-in for everyone, and a record of who accessed what. WS Mail turns all of these on with one switch, HIPAA mode, in the admin console. Your own policies, staff training and risk analysis are the rest, and no email product can do those for you.
Press the lock in the composer before you send. The patient receives a notice with a private link instead of the message itself, confirms a code sent to their address, and reads the message and attachments on a secure page. You see when it was opened, and you can revoke it at any time.
Outgoing mail is checked for patient identifiers such as medical record numbers, Social Security numbers and dates of birth. You choose what happens: warn the sender, send it securely instead, or block it. In HIPAA mode it is at least "send securely".
Yes. A solo practitioner or a practice of a few people can set it up in minutes on its own domain, at $1 a user a month on Starter. HIPAA mode, secure messages and data-loss checks are on every plan, including Free; the full access audit log and the compliance archive are on Enterprise at $6 a user.
Yes. Connect the domain you already own, and the migration assistant copies your existing mail and folders across while your old account keeps working, so nothing has to be switched over at once.
Start free on your own domain. No card, and your staff can be signing in within the hour.
Create your free accountNo credit card. No trial clock.