
This article is part of our Therapy Practice Marketing Guide: how clients find a therapist, how to market ethically and privately, and how to choose the right help. Want to know where your practice's site stands? Get a free 20–30 page website audit within 24 hours.
For most solo therapists, Squarespace or Wix is the faster start, and WordPress is the more flexible long-term choice. None of the three should be treated as a home for client health records. The right pick depends on how much you want to manage yourself, how much your practice will grow and how you plan to handle intake and scheduling.
This comparison uses each vendor's own pages, checked on 29 October 2026. It is part of our Therapy Practice Marketing Guide. It is marketing guidance, not compliance advice, so confirm any HIPAA setup with your compliance advisor.
Key Takeaways
- Squarespace says Acuity Scheduling is its only feature designed for HIPAA obligations; its standard forms are not covered.
- Wix offers PHI protection and a BAA on certain plans, with limits on apps, old forms and booking notes.
- WordPress is open-source software, so HIPAA coverage depends on your host, plugins and form tools, not on WordPress itself.
- Whatever you choose, keep intake, notes and billing in a covered tool such as your EHR.
- Builders cost less to start; WordPress gives more control over SEO, speed and design as a practice grows.
Quick comparison
| Factor | Squarespace | Wix | WordPress |
|---|---|---|---|
| What it is | Hosted builder | Hosted builder | Open-source software you host |
| Ease of setup | Easy | Easy | Needs more technical help |
| HIPAA features | Acuity Scheduling on eligible plans | PHI protection on eligible plans | Depends on host and plugins |
| Design control | Template-based | Template-based, flexible editor | Full control |
| Upkeep | Vendor handles updates | Vendor handles updates | You or your developer handle updates |
| Moving away later | Harder | Harder | Easier |
What each platform says about HIPAA
This is the question therapists ask most. Here is what each vendor says on its own pages.
Squarespace
Squarespace's HIPAA help article says Acuity Scheduling is "the only Squarespace feature currently designed to offer services consistent with HIPAA obligations." It also says:
- The Business Associate Agreement (BAA) "doesn't cover other Squarespace features."
- Other parts of the platform, including forms, "can't be used as part of a HIPAA compliant solution."
- You "shouldn't maintain or transmit Protected Health Information through Squarespace outside of Acuity."
- A HIPAA-enabled Acuity account needs the Powerhouse or Premium plan.
In short: a Squarespace site can show information about your practice, and Acuity can handle scheduling on an eligible plan. Contact forms that might collect health details need a different tool.
Wix
Wix's HIPAA help article says a site can be HIPAA compliant on a supported plan: Business, Plus, Elite, Business Elite or Enterprise. Points to know:
- You sign a BAA and turn on PHI protection in the dashboard, and Wix recommends collecting no PHI until both are done.
- PHI protection can only be turned on from desktop.
- Old Wix Forms must be deleted and rebuilt with the new Wix Forms.
- Non-compliant apps are hidden from the App Market, and Wix "cannot guarantee HIPAA compliance for apps or services we do not control."
- Visitor data that could identify someone is hidden, so you lose some analytics.
- Facebook and Instagram must be disconnected from Wix Inbox.
Wix offers more built-in HIPAA coverage than Squarespace. The trade-off is fewer apps and less analytics once protection is on.
WordPress
WordPress.org describes WordPress as open-source software licensed under the GPL. There is no single "WordPress company" that signs a BAA for your site. Coverage depends on:
- Your host. If health data is stored on your server, your host may be a business associate. Ask your host for its BAA in writing.
- Your form plugin. Some form plugins save entries in your site's database, so check where yours stores them.
- Other plugins. Chat, analytics and booking plugins may send data to third parties.
The common approach is to keep PHI off the WordPress site entirely. Embed a form from a vendor that signs a BAA, and link to your EHR's portal for intake. For example, Jotform's HIPAA page says covered entities who turn on its HIPAA features receive a signed BAA, on its Gold or Enterprise plans.
Cost and ownership
Builders: one subscription
Squarespace and Wix bundle hosting, security updates and the editor into a subscription. As of October 2026, Squarespace's pricing page lists Basic, Core, Plus and Advanced plans and says annual billing saves up to 36%. Wix's plans page lists Light, Core, Business and Business Elite, with Business at $39.77 a month on a yearly plan and a note that prices vary by location.
Remember that Wix's HIPAA features require one of its higher plans. On Squarespace, HIPAA support is tied to Acuity's plan, not the website plan. If you need covered tools, add those plan costs to your budget. Our guide to therapist website cost walks through all the cost drivers.
WordPress: pieces you assemble
WordPress itself has no license fee, but you pay for hosting, a theme, any premium plugins and maintenance. You also need someone to keep core, theme and plugins updated. Skipping updates is one of the main security risks on WordPress, so budget for care. See our website security services for what ongoing protection covers.
Who owns what
With WordPress, you own the files and can move hosts. With a hosted builder, your site lives on the vendor's platform. You can usually export some content, but moving away later takes more work. If you think you may outgrow a builder, read moving your therapy website off Squarespace or Wix.
SEO and flexibility
All three can rank. Search engines care about useful content, clear structure and a fast, mobile-friendly site. Differences show up as a practice grows.
- Squarespace gives you clean templates and the basic SEO settings: page titles, descriptions and URLs. Fine control over page structure is more limited.
- Wix offers a flexible editor and SEO settings. Turning on PHI protection hides some visitor data, which affects reporting.
- WordPress gives full control over structure, schema markup, speed tuning and content types such as clinician directories. It needs more expertise to use well.
For a solo therapist with a handful of pages, the platform matters less than the copy. For a group practice with many clinicians, specialties and locations, WordPress or a custom build tends to scale better.
What to keep off-site, whatever you choose
Your public website is a marketing tool. Keep clinical data somewhere built for it.
| Keep on the website | Keep in a covered tool |
|---|---|
| Who you help and how | Intake history and symptoms |
| Fees, insurance and Good Faith Estimate notice | Session notes |
| Clinician bios and approach | Insurance and billing details |
| Crisis resources | Messages about care |
| A short, non-clinical contact form | Appointment details that reveal a diagnosis |
Also be careful with tracking. Google says it does not offer a BAA for Google Analytics and tells HIPAA-regulated customers not to send it PHI. The FTC has acted against health apps that shared sensitive data with advertisers, including its order against BetterHelp. Our guide to tracking pixels on therapy websites explains what to turn off.
For a full walk-through of forms and scheduling on each platform, see HIPAA-compliant forms, intake and scheduling for therapists.
Which platform should you choose?
Choose Squarespace if:
- You want a clean, simple site with little upkeep.
- You will use Acuity on an eligible plan, or your EHR, for scheduling.
- You will embed a BAA-backed form or link to your client portal.
Choose Wix if:
- You want built-in HIPAA features on the website itself.
- You are comfortable with a higher plan and fewer third-party apps.
- You do not rely heavily on detailed analytics.
Choose WordPress if:
- You run, or plan to run, a group practice with many pages.
- You want full control over SEO, speed and design.
- You have a developer or agency to handle updates and security.
Next step
If you are starting a new site, your next decision is who builds it. Read how to choose a website designer for your therapy practice. If you would rather hand it off, eSEOspace designs and builds sites for therapy practices on the platform that fits your plans.
Frequently asked questions
Is Squarespace HIPAA compliant for therapists?
Squarespace says only Acuity Scheduling is designed for HIPAA obligations, on its Powerhouse or Premium plans. Its other features, including forms, cannot be part of a HIPAA-compliant solution, according to its help article. Use a separate covered tool for anything clinical.
Is Wix better than Squarespace for HIPAA?
Wix offers PHI protection across more of the website on eligible plans, including its new forms. That comes with limits on apps, booking notes and analytics. Which is "better" depends on whether you want health data on the website at all.
Can a WordPress site be HIPAA compliant?
WordPress is software, so compliance depends on your host, plugins and form tools. Many practices avoid storing PHI on a WordPress site and embed a covered form or link to an EHR portal instead.
Should I switch platforms if my site already works?
Not just for HIPAA. Moving health data off the site is usually easier than moving platforms. Switch when your current platform limits growth, speed or design, and plan redirects so you keep your search visibility.
What do most therapists use for intake?
Many use their EHR's client portal for intake forms and e-signatures, and keep the website form short. That keeps client records in one covered system.











