Hushmail is the de facto standard for HIPAA-compliant email in solo and small therapy practices. Plans for healthcare include encrypted email that works with clients' ordinary addresses (recipients open secure messages via a simple portal when needed), a signed BAA, archiving, and — importantly — secure web forms with e-signatures for intake packets, consents, and screeners, at a price accessible to a brand-new practice. Setup supports custom domains so your practice email looks professional, and the learning curve is minimal compared with configuring Google Workspace or Microsoft 365 compliantly. It does not do practice management, and its forms are simpler than IntakeQ's conditional-logic engine; many practices pair Hushmail email with a dedicated forms or EHR system. For therapists who simply need to email clients and receive documents without violating HIPAA, it is the lowest-friction compliant answer available.