Guide · Call Tracking
A HIPAA-bound dental office can't self-serve a call-tracking BAA — every one runs through sales
CallRail's $50 self-serve plan does not include a BAA. A signed agreement means a separate Healthcare account at CallRail, Marketing Pro ($179) at CallTrackingMetrics, or an enterprise quote at Invoca — the compliance requirement pushes a dental office well past the entry sticker.
Re-verified 2026-06-22, with a material correction. A live re-check found the previous version of this guide was wrong on its central point: CallRail’s $50 Lead Tracking plan does not include a BAA. HIPAA at CallRail requires a separate “Healthcare” account set up through sales (per CallRail’s own help center), and its price is not posted on the public pricing grid. So there is no cheap, self-serve, BAA-included entry tier here — every path to a signed BAA runs through a sales conversation. CallRail’s overage rates also read $0.05/local-min and $0.08/toll-free-min (not the $0.045/$0.065 previously stated). CTM and Invoca are unchanged.
A dental practice that needs call tracking is not a hard shopping problem — two constraints do almost all the filtering. The office handles personal health information on the phone, so it needs a vendor that will sign a Business Associate Agreement; and it runs modest call volume, so it does not need an enterprise platform. The catch, easy to miss, is that the BAA is not something you can buy off a self-serve pricing page. CallRail’s cheapest plan, Lead Tracking at $50/mo, does not include a BAA — HIPAA at CallRail is a separate “Healthcare” account you request from sales, and CallRail’s public pricing grid doesn’t post its price. So the real shape of this decision is the opposite of cheap-and-easy: every path to a signed BAA runs through a sales conversation, and the floor sits well above the $50 sticker that catches your eye first.
That correction is the recommendation. The rest is what each compliant path actually costs.
The BAA filter does the work — and it filters toward sales, not a $50 plan
Of the sixteen vendors in this dataset, a real BAA exists in only a few places, and not where you’d hope. Invoca publishes it plainly — “HIPAA Compliant” and “BAA Supported Platform” sit in its site-wide footer, available across every tier — but Invoca is quote-only enterprise pricing scaled by 6,000–18,000 phone numbers a year, aimed at contact centers, not a four-operatory dental office. CallRail will sign a BAA too, but only through a separate Healthcare account that its standard self-serve plans don’t include; you request it from sales, and the price isn’t posted publicly (third-party trackers put the floor materially above the $50 entry, around $150/mo — CallRail itself doesn’t state it). CallTrackingMetrics lists a HIPAA/GDPR compliance feature starting on its Marketing Pro tier ($179/mo), but publishes no signed-BAA commitment at all — for a covered entity, that’s a sales conversation to pin down in writing, not a checkbox. Everyone else — WhatConverts, Ringba, Nimbata, Infinity, Convirza, WildJar, Dialics, Mediahawk — leaves both fields unpublished. In a compliance context, unpublished is not a maybe; it is a different vendor.
So the BAA filter doesn’t hand a modest dental office a cheap self-serve winner. It hands it a short list of sales conversations.
The three real paths to a BAA
Here is what a HIPAA-bound dental office is actually choosing between, cheapest knowable price first:
| Vendor | Path to a signed BAA | Price | What it really means |
|---|---|---|---|
| CallTrackingMetrics | Marketing Pro tier, BAA via sales | $179/mo | HIPAA/GDPR feature published; the signed BAA itself isn’t, so confirm it in writing |
| CallRail | Separate Healthcare account, via sales | not posted (third-party trackers report ~$150/mo) | the $50 Lead Tracking self-serve tier carries no BAA |
| Invoca | Platform-wide BAA, all tiers | quote-only (enterprise) | scaled by 6,000–18,000 numbers/yr — overkill for a dental office |
The one number a dental office will find first — and should not trust as compliant — is CallRail’s $50 Lead Tracking sticker. It’s a fine product for non-PHI call tracking: $50/mo for 5 local numbers and 250 local minutes, and at a realistic 150 calls of four minutes (600 talk-minutes) you run 350 minutes over the bundle at $0.05/min, so about $67.50/mo before the ~10% annual discount. Toll-free minutes run $0.08/min, SMS $0.03/msg, extra local numbers $3/mo. But none of that comes with a BAA, so for a dental practice it is the wrong product at any price: the compliant CallRail account is a different, sales-gated SKU that costs more.
What the compliant options actually buy
CallTrackingMetrics Marketing Pro at $179/mo is the cheapest plan in the set that even lists HIPAA as a feature, and it bundles 3,000 transcribed minutes (overage $0.02/min standard, $0.10/min enhanced) — far more transcription than a dental front desk will touch. Its cheaper Marketing Lite at $79/mo does not carry the HIPAA tier, so it’s off the table for this buyer. The catch is that CTM publishes the HIPAA/GDPR feature but not a signed BAA, so a covered entity has to get the agreement itself in writing from sales before relying on it.
CallRail’s Healthcare account is the path most dental offices will be steered to, since CallRail is the category’s default brand — but it is set up by contacting CallRail directly, priced above the public $50 tier, and not posted, so you cannot comparison-shop it from the pricing page. Budget for a sales call and a number well north of $50.
Invoca will sign the BAA on any tier — its compliance badges are platform-wide, not gated to an upper plan — but its pricing is a quote scaled by 6,000–18,000 annual phone numbers, which is enterprise economics aimed at contact centers, not a single dental office. It’s the answer only if you’ve outgrown the question. (For a side-by-side on the non-compliance economics, see our CallRail vs WhatConverts pricing comparison.)
How to read this
For a HIPAA-bound dental practice, the honest answer is that there is no $50 shortcut. The BAA requirement, not call volume or price, still settles the shortlist — but it settles it toward a sales conversation, not a self-serve checkout. The realistic compliant options are CallTrackingMetrics Marketing Pro at $179/mo (HIPAA feature; confirm the signed BAA with sales), CallRail’s Healthcare account (request it from sales; priced above the public $50 tier and not posted), or Invoca (platform-wide BAA, enterprise quote — only if you’ve outgrown the question). The $50 Lead Tracking plan that looks like the obvious pick is the one trap to avoid: it’s a capable call-tracking product, but it is not the HIPAA-compliant one. Whichever you choose, get the BAA in writing before you sign — that is the document that makes the rest of it legal.