Is Wispr Flow HIPAA compliant?

Yes. Since August 2025, Wispr Flow has offered HIPAA support on all plans, including the free one. Before that it was limited to Enterprise customers. Wispr's announcement put it simply: "Flow is now HIPAA compliant. All plans, all devices."

As of October 2026, you sign the Business Associate Agreement inside the app: Settings, then Data & Privacy, then "View and accept" next to Enable HIPAA, enter your legal name and click I Agree. Wispr's help center says BAA signing is available on Mac, Windows and iOS; Android has no signing flow. The Growth and Enterprise team plans include a standard BAA. If you belong to an organization with active billing, you can't sign a personal BAA; your organization handles it.

That is a real, usable path for a solo clinician, and it is easier than most cloud vendors make it.

Wispr has two data settings: "Improve the model for everyone," which controls whether your data can be used for training, and "Dictation cloud storage," which controls whether your transcription history is stored. On the Free and Pro plans, model improvement is on by default. A signed BAA locks both settings off, which gives you zero data retention for your dictations.

Some things don't change. Wispr's documentation says turning these settings off "does not stop cloud processing," and that metadata such as word count, the app you dictated into, the URL and a timestamp is still uploaded. It also says in-app feedback is not stripped by these settings or a BAA, so don't paste client details into a bug report. On BAA accounts, Wispr disables its Notetaker and Scratchpad features.

In the cloud. Wispr's security FAQ says "Wispr Flow processes dictated audio in the cloud," describes it as a cloud service hosted in the United States, and says its third-party AI providers may not use your data to train their models. Its help center states that "an internet connection is required for transcription." Wispr lists a SOC 2 Type II report and an ISO/IEC 27001:2022 certificate.

So the honest summary is: Wispr Flow is a cloud dictation service that you can use under a BAA, with no storage of your dictations once the BAA is signed. Your words still leave your computer to be transcribed.

Wispr Flow is a polished, widely used product. It runs on more platforms than we do, including iPhone and Android, it holds SOC 2 Type II and ISO 27001 credentials, and the BAA is a few clicks away. If you want one dictation tool for clinical notes, email and everything else across your phone and computer, and you are comfortable with cloud processing under a BAA, it is a reasonable choice.

Some clinicians would rather client information never leave the room, even under a contract. Others work in places with unreliable internet, or simply don't want another vendor in their HIPAA paperwork. For them, dictation that runs entirely on the computer removes the question: there is no business associate because nobody else receives the audio or the text.

That is what Sapience Med does, with a medication vocabulary tuned for psychiatry and a one-time price. We go through the day-to-day differences in Wispr Flow alternative for therapists, and the legal background in do I need a BAA for dictation software?