Is QuickBooks Online HIPAA compliant for medical practice bookkeeping?
No. QuickBooks Online is not HIPAA compliant and Intuit does not sign Business Associate Agreements. This means medical practices should never store protected health information in QBO. But that doesn’t mean you can’t use it for your bookkeeping. You just need to be careful about what goes in and what stays out.
HIPAA requires that any software handling protected health information (PHI) be covered under a BAA with the healthcare provider. PHI includes patient names, dates of service tied to individuals, diagnoses, treatment details, and anything else that could identify a specific patient. Intuit has made it clear that QBO is not designed to store or transmit PHI and they will not sign a BAA. That is unlikely to change.
The good news is that bookkeeping doesn’t require patient-level detail. Your practice management system or EHR handles the patient-facing side of finances: individual charges, insurance claims, patient balances, and payment posting. QBO handles the business financial side: total revenue by category, operating expenses, payroll, rent, and supplies. These are two separate systems with two separate jobs.
What you push into QBO should be summary-level financial data only. Total collections for the day or week. Aggregated charges by service type or payer category. Payment adjustments in bulk rather than tied to individual patients. Insurance reimbursements as lump deposits matched to the correct revenue accounts. None of this contains PHI because none of it identifies a specific patient.
What should never go into QBO: patient names in invoice or memo fields, individual superbills, EOBs with patient identifiers, or any transaction description that includes a patient’s name or account number. Even putting a patient name in the memo line of a deposit technically creates a HIPAA exposure. It seems minor, but this is exactly the kind of thing that causes problems during an audit.
The workflow that works for most medical and dental practices is straightforward. Run your clinical and billing operations through your practice management system. Let that system handle all patient-level financial detail. Then transfer summary totals into QBO for your actual bookkeeping, whether daily, weekly, or monthly depending on your volume.
This separation actually makes your books cleaner. Practice management systems are built to track patient accounts but are not great at giving you a full picture of business finances. QBO is built for financial reporting but has no business holding clinical data. Using each tool for what it was designed to do gives you better results on both sides.
If you’re managing multiple entities or locations within a healthcare group, the summary-level approach becomes even more important. You want clean financials for each entity without PHI scattered across your accounting files. Getting this structure right from the start prevents compliance headaches later. Our Orange County small business bookkeeping services can help you set up QBO properly so your financial data stays organized and your patient information stays where it belongs.
Orange County's Small Business Bookkeeper
The Next Step:
A Short Conversation
Tell us about your business and what you need help with. We'll listen, ask a few questions, and give you a straightforward quote with no surprises.
More Questions
What California labor laws affect salon payroll and bookkeeping?
California has strict rules around tip credits, daily overtime, meal and rest breaks, piece-rate pay, and worker classification that directly impact how salon owners run payroll and keep their books. Getting any of these wrong can trigger EDD audits and costly penalties.
Read answerHow do I separate personal and business expenses when a doctor owns the practice building?
The standard approach is to hold the building in a separate LLC from the medical practice. The practice pays fair market rent to the property LLC, and both entities maintain completely separate books.
Read answerWhat bookkeeping challenges are unique to medical practices compared to other small businesses?
Insurance reimbursement lag, the gap between charges and collections, and the cash vs. accrual accounting decision create bookkeeping complexity that most small businesses never deal with. Medical practices also face provider compensation tracking, regulatory compliance costs, and multi-entity structures.
Read answerHow do I handle factoring company payments in my trucking bookkeeping?
Record the full invoice amount as accounts receivable, then apply the factoring company's advance as a partial payment. When the reserve is released, record the net payment and book the factoring fee as an expense. Reconcile factoring statements weekly to catch discrepancies early.
Read answerWhat is the difference between cash basis and accrual basis bookkeeping?
Cash basis records revenue when you receive payment and expenses when you pay them. Accrual basis records revenue when earned and expenses when incurred, regardless of when money changes hands. The right choice depends on your business type and how you get paid.
Read answerWhat is the $800 California LLC franchise tax and does my bookkeeper need to track it?
It's an annual $800 fee every California LLC owes to the Franchise Tax Board, even with zero revenue. Your bookkeeper should absolutely track it because missing the deadline triggers penalties of 5% per month.
Read answer