Teams is HIPAA-capable, not HIPAA-simple
Microsoft lists Teams as an in-scope Office 365 service for HIPAA and HITECH, and Microsoft offers a Business Associate Agreement for eligible plans. That means Teams is not automatically disqualified for healthcare use. But Microsoft also makes the shared responsibility clear: a BAA with Microsoft does not make your organization HIPAA compliant on its own. Your team is still responsible for configuring and maintaining the right Microsoft 365 controls.
- Eligible Microsoft 365 license tier with HIPAA-covered services
- Signed BAA through the Microsoft admin portal or enterprise agreement
- Purview DLP policies to prevent PHI from leaking to unauthorized channels
- Retention and audit policies configured for HIPAA record-keeping requirements
- Ongoing admin review as Microsoft updates Teams features and defaults
BloomText ships compliant out of the box
BloomText is built for one job: HIPAA-compliant healthcare messaging. A signed BAA is included at signup on every plan, including the free plan. Conversation auditing, user removal, and access controls are built into the product without requiring a separate compliance platform. Staff can message from Windows desktops at a site while supervisors stay reachable on iPhone or Android. There is no Microsoft 365 environment to stand up and no Purview policy configuration to maintain.
What we hear from healthcare teams evaluating Teams
In a recent customer discovery conversation, a group home management organization operating 14 residential care homes described this tradeoff firsthand. They already had Microsoft 365 licenses and initially assumed Teams would cover their secure messaging needs. Their concern was the ongoing compliance burden: configuring Purview policies, managing DLP rules across locations, and designating a HIPAA security officer to maintain oversight. What they actually needed was straightforward — staff at each home messaging supervisors and the main office about resident information from Windows laptops, with supervisors reachable on iPhone and Android when off-site. They were not looking for a collaboration suite. They were looking for HIPAA messaging that worked without an IT project to maintain it.
When Teams is the right choice
Teams is the right choice when the organization already invests in Microsoft 365 administration and needs messaging inside a broader collaboration platform. Hospitals, health systems, and large practices with IT departments routinely run Teams under a BAA with Purview compliance controls in place. The comparison tilts toward BloomText only when the healthcare team does not have — or does not want — the admin infrastructure that HIPAA-governed Teams requires.
