ClassDojo is built for teachers and students. If your ABA or therapy practice uses it for parent communication, you have a compliance gap.
Get started for freeSchedule a demo →No. ClassDojo is a classroom communication platform designed for K-12 education. It is COPPA and FERPA compliant and iKeepSafe certified, but these are education standards, not healthcare standards. ClassDojo does not offer a BAA, does not certify HIPAA compliance, and was not designed for healthcare communication. ABA practices using ClassDojo for parent messaging about therapy are operating outside HIPAA.
ClassDojo's privacy and security documentation covers COPPA, FERPA, and GDPR compliance. There is no mention of Business Associate Agreements or HIPAA. Without a BAA, ClassDojo cannot legally receive, store, or transmit protected health information on behalf of a healthcare provider.
Source: ClassDojo Privacy & SecurityClassDojo complies with the Children's Online Privacy Protection Act (COPPA) and the Family Educational Rights and Privacy Act (FERPA). These laws protect student education records and children's online data. HIPAA protects patient health information. A platform can be fully COPPA and FERPA compliant and still violate HIPAA if it handles healthcare data without a BAA and the required safeguards.
Source: ClassDojo Privacy PolicyWhen an ABA therapist messages a parent about session progress, behavior data, treatment goals, or medication interactions, that communication contains protected health information. ClassDojo was designed for teachers sharing classroom updates, homework reminders, and behavior points. The platform has no concept of PHI, no healthcare-grade access controls, and no mechanism for documenting that a parent was notified of a clinical matter.
Source: HHS HIPAA Security RuleClassDojo provides teacher-level controls for classroom management. It does not provide the organizational admin controls that HIPAA requires: centralized user management, conversation auditing, data retention policies, or the ability to revoke a departing staff member's access to parent conversations containing PHI.
Source: HHS HIPAA Security RuleClassDojo states it is "fully compliant with COPPA, FERPA, and GDPR in Europe" and "fully certified by iKeepSafe." ClassDojo's privacy documentation does not reference HIPAA, BAAs, or healthcare use cases.Source: ClassDojo Privacy & Security
Purpose-built HIPAA messaging for healthcare practices including ABA. Signed BAA on every plan, read receipts for parent notification records, and parents reply via SMS with no app download.
HIPAA-compliant communication platform for medical practices with secure messaging, phone, fax, and telehealth.
Patient texting platform with EHR integrations, call-to-text, and website chat for practices that need broader patient communication tools.
No. ClassDojo is a classroom communication tool that complies with COPPA and FERPA, which are education regulations. It does not offer a BAA and does not certify HIPAA compliance. Using ClassDojo for parent communication about therapy, diagnoses, or treatment plans violates HIPAA.
ABA therapy is healthcare, and communication about therapy sessions and treatment goals is protected health information. ClassDojo was designed for teachers and students, not for healthcare providers. Using it for clinical parent communication creates a HIPAA compliance gap.
FERPA protects student education records at schools and universities. HIPAA protects patient health information at healthcare providers, health plans, and their business associates. ABA therapy is healthcare, so parent communication about treatment falls under HIPAA, not FERPA, even if the clinic feels similar to a school.
ABA practices need HIPAA-compliant messaging with a signed BAA, audit trails, admin access controls, and the ability to document parent notifications. BloomText provides all of these, and parents reply via standard SMS without downloading an app.
Last verified June 25, 2026.
