Is QuickBooks Online HIPAA compliant for medical practice bookkeeping?
No. QuickBooks Online is not HIPAA compliant and Intuit does not sign Business Associate Agreements. This means medical practices should never store protected health information in QBO. But that doesn’t mean you can’t use it for your bookkeeping. You just need to be careful about what goes in and what stays out.
HIPAA requires that any software handling protected health information (PHI) be covered under a BAA with the healthcare provider. PHI includes patient names, dates of service tied to individuals, diagnoses, treatment details, and anything else that could identify a specific patient. Intuit has made it clear that QBO is not designed to store or transmit PHI and they will not sign a BAA. That is unlikely to change.
The good news is that bookkeeping doesn’t require patient-level detail. Your practice management system or EHR handles the patient-facing side of finances: individual charges, insurance claims, patient balances, and payment posting. QBO handles the business financial side: total revenue by category, operating expenses, payroll, rent, and supplies. These are two separate systems with two separate jobs.
What you push into QBO should be summary-level financial data only. Total collections for the day or week. Aggregated charges by service type or payer category. Payment adjustments in bulk rather than tied to individual patients. Insurance reimbursements as lump deposits matched to the correct revenue accounts. None of this contains PHI because none of it identifies a specific patient.
What should never go into QBO: patient names in invoice or memo fields, individual superbills, EOBs with patient identifiers, or any transaction description that includes a patient’s name or account number. Even putting a patient name in the memo line of a deposit technically creates a HIPAA exposure. It seems minor, but this is exactly the kind of thing that causes problems during an audit.
The workflow that works for most medical and dental practices is straightforward. Run your clinical and billing operations through your practice management system. Let that system handle all patient-level financial detail. Then transfer summary totals into QBO for your actual bookkeeping, whether daily, weekly, or monthly depending on your volume.
This separation actually makes your books cleaner. Practice management systems are built to track patient accounts but are not great at giving you a full picture of business finances. QBO is built for financial reporting but has no business holding clinical data. Using each tool for what it was designed to do gives you better results on both sides.
If you’re managing multiple entities or locations within a healthcare group, the summary-level approach becomes even more important. You want clean financials for each entity without PHI scattered across your accounting files. Getting this structure right from the start prevents compliance headaches later. Our Orange County small business bookkeeping services can help you set up QBO properly so your financial data stays organized and your patient information stays where it belongs.
Orange County's Small Business Bookkeeper
The Next Step:
A Short Conversation
Tell us about your business and what you need help with. We'll listen, ask a few questions, and give you a straightforward quote with no surprises.
More Questions
What bookkeeping challenges are unique to medical practices compared to other small businesses?
Insurance reimbursement lag, the gap between charges and collections, and the cash vs. accrual accounting decision create bookkeeping complexity that most small businesses never deal with. Medical practices also face provider compensation tracking, regulatory compliance costs, and multi-entity structures.
Read answerWhat are the bookkeeping requirements for importing goods into California?
California importers need to track customs duties by harmonized tariff code, pay use tax on goods when sales tax wasn't collected at entry, file with the CDTFA, and maintain resale certificate files if selling wholesale. Getting any of these wrong creates audit exposure.
Read answerHow do I track food costs and calculate food cost percentage for my restaurant?
Food cost percentage equals beginning inventory plus purchases minus ending inventory, divided by food sales. Most restaurants should target 28% to 35%. Track it weekly so you catch problems before they eat into your margins.
Read answerHow do I track purchase orders and vendor payments for a wholesale business?
Use QuickBooks Online to create purchase orders, receive inventory, and match vendor bills. Track PO status, vendor payment terms, and early payment discounts. Run A/P aging reports regularly because large orders can tie up cash for 60 to 90 days before you sell through.
Read answerHow do I set up inventory accounting in QuickBooks for a wholesale distribution business?
Enable inventory tracking in QuickBooks Online, set up products with accurate costs, and organize by category or product line. Most wholesalers with hundreds of SKUs will need a third-party inventory app that syncs with QBO to handle landed costs, reorder points, and real reporting.
Read answerHow should a nephrology or dialysis practice handle bookkeeping for multiple clinic locations?
Each clinic location needs its own set of books with a standardized chart of accounts so you can produce location-level P&L reports. Shared costs like admin, billing staff, and EMR systems require documented allocation methods that hold up under audit.
Read answer