No screen recorder is "HIPAA certified", because there is no regulatory-backed certification to hold. A covered entity that records protected health information needs a vendor that signs a Business Associate Agreement (BAA). Screencap does not sign BAAs and holds no HIPAA certification, so do not use Screencap for protected health information.
What does a screen recorder need before it can handle patient information?
A screen recorder needs a signed Business Associate Agreement with the organisation using it. Under HIPAA, a company that creates, receives, maintains or transmits electronic protected health information on your behalf is a business associate, and the two sides need a BAA. The paperwork decides this, not the product's features.
HHS says this directly in its guidance on HIPAA and cloud computing. A cloud service that stores or processes electronic protected health information for a covered entity is a business associate. The guidance adds that not holding the encryption key does not exempt the provider. HHS also publishes a page on business associates, and the Security Rule sets the safeguards a covered entity must apply to electronic protected health information.
This page is general information, not legal advice. Your privacy officer or counsel decides which tools your organisation may use.
Can I use Screencap for recordings that contain patient information?
No. Screencap does not sign Business Associate Agreements, and it holds no HIPAA, SOC 2 or ISO 27001 certification. Do not record patient names, records, images or any other protected health information with Screencap, in the Mac app or in the browser. Screencap is a general screen recorder run by Dharma Loop LLC, and it was not built for regulated health data.
Screencap stores recordings on Cloudflare R2 in North America, with app servers and the database in Germany. None of that changes the answer, because no BAA exists to cover it.
Does end-to-end encryption make Screencap suitable for patient data?
No. End-to-end encryption in the Screencap Mac app keeps the video and thumbnail unreadable to Screencap's servers, but it does not create a BAA. HHS's cloud guidance says a provider without the key is still a business associate, so the contract question remains. Screencap also still sees some information about an encrypted recording.
- Optional and Mac only. The setting is off by default, and browser recordings and screenshots are not encrypted.
- What Screencap still sees. A neutral title, length, resolution, your account, timestamps, comments, reactions, view counts and viewers' IP addresses in server logs.
- Not available when encrypted. Transcripts, AI summaries and chat previews, so encryption also removes features.
The encrypted screen recorder page explains how the key travels in the link, and Security lists what Screencap can and cannot see.
Which screen recording and meeting tools say they sign a BAA?
Of the tools checked on 25 October 2026, Zoom and Zight say on their own pages that they sign a BAA, and Loom says it cannot. Each entry below comes from the vendor's page. A vendor saying it signs a BAA is a starting point: ask for the agreement itself and confirm which plans it covers.
| Tool | What its own page says | Source |
|---|---|---|
| Zoom | "Yes, Zoom has a standard BAA that can be entered into when required by our customers." The page states there is no regulatory-backed certification for HIPAA. | Zoom security and compliance FAQ, checked 25 October 2026 |
| Zight | Says a signed BAA is available on its Scale plan. | Zight HIPAA page, dated 6 October 2026, checked 25 October 2026 |
| Loom | "Loom currently is not able to sign Business Associate Agreements." No plan is named as an exception. | Atlassian support, Loom, undated, checked 25 October 2026 |
| Screencap | Does not sign BAAs. Holds no HIPAA, SOC 2 or ISO 27001 certification. | This page |
Zoom records meetings and shared screens, so it fits a different job from a recorder you use to make a walkthrough on your own. Pricing, plans and BAA terms change, so read the vendor's current page before you decide.
What can I record with Screencap in a healthcare job?
You can record anything that contains no protected health information, such as a software walkthrough on a demo system, a how-to for staff built on test data, a bug report with made-up records, or a product demo. The test is whether a real patient could be identified from anything on screen or in the audio.
- Switch to dummy data first. Blurring in an editor afterwards is not a safe way to remove patient information.
- Close other windows and turn on Do Not Disturb. A notification can show a name mid-recording.
- Watch the recording back. Scrub for names, record numbers and browser autofill before you share it.
The private sharing checklist covers these steps in more detail.
Questions
Does HHS or anyone certify screen recording software for HIPAA?
No. Zoom's own security and compliance FAQ says there is currently no regulatory-backed certification for HIPAA compliance, and that it helps customers by signing a BAA. Treat any "HIPAA certified" badge on a recorder as marketing and ask for the BAA instead.
Does Loom sign a BAA?
Not according to Loom's own page. Atlassian's support article Is Loom HIPAA compliant? says Loom currently is not able to sign Business Associate Agreements and asks customers not to send personal health information to Loom if that would breach their HIPAA obligations. The article names no plan as an exception. Checked 25 October 2026.
Is a signed BAA enough to make a recording tool safe for patient data?
No. A BAA is the contract that lets a vendor handle protected health information for you. You still have to meet the Security Rule for your own use of the tool, such as who can access recordings, how long you keep them and what settings you switch on. Ask the vendor which plans and features the BAA covers.
Can I record my screen with patient information on a Mac without a cloud tool?
A recorder that saves only to your own Mac does not send the video to a vendor. The Mac's built-in recorder in the Screenshot toolbar (Shift-Command-5) saves a file and lets you pick the save location, per Apple Support (published 14 September 2026). The file is still protected health information, so your organisation's storage, access and deletion rules apply to it.
What should I do if I recorded patient information in Screencap?
Delete the recording from your Screencap dashboard, then tell your privacy officer or whoever handles incidents at your organisation. Backups are kept for 30 days after deletion. You can also email [email protected] with the recording link if you need help with the deletion.