Guide · Call Tracking
The cheapest tier that publishes HIPAA is WhatConverts Pro at $100 — and nobody posts a price for a BAA
This guide used to answer '$29, Convirza, signed BAA.' It cannot: Convirza's own contract states it 'makes no claims or warranties regarding compliance with HIPAA,' and there is no $29 anyone can buy unaided — every Convirza tier sells through Get A Demo. With that withdrawn, the cheapest tier publishing HIPAA at all is WhatConverts Pro at $100/mo month-to-month, and the only two vendors that publish a signed-BAA commitment both keep it behind a sales call with no posted price.
Corrected 2026-09-08 — this guide’s headline claim was not supportable, and we have withdrawn it. An earlier version said the cheapest call tracking with a signed BAA was Convirza at $29. A full read of Convirza’s public site breaks that four ways. Clause 15 of its terms and conditions states: “Convirza makes no claims or warranties regarding compliance with HIPAA” — and clause 27 voids any term not written into that agreement, which is exactly where the BAA sentence we quoted does not sit. That sentence is real, but it is one tile in a Caller Privacy product-feature grid that names no plan, tier or account type, and we printed it truncated, ending it with a full stop eleven words early. There is no $29 anyone can buy unaided either: every Convirza tier’s button is “Get A Demo”, so the self-serve-versus-sales-gated contrast this guide drew against CallRail collapses — Convirza’s whole purchase is sales-gated too. Our dataset holds Convirza’s HIPAA and BAA fields as unstated, and this guide now says the same. The second fix runs the other way: WhatConverts does publish HIPAA — but from its Pro tier at $100/mo, not on the $30 entry plan this guide credited. The compliance floor is higher than we said, and the BAA floor has no published price at all. A third fix lands on the cheap end itself: WildJar is no longer a cheap entry. The $39 Starter this guide listed among the low rungs came from wildjar.com/pricing-united-states, a page nothing on WildJar’s site links to any more — it still answers, which is why our re-checks kept confirming it. WildJar’s live page prices US Starter at $150/mo, bundling 4 tracking numbers, 500 minutes and AI transcription, and prices its Growth/Agency plan at $89/mo plus usage. Its cheapest published way in is $89, not $39, and it publishes no annual rate at all. That reorders the cheap table below; it changes nothing about compliance, because WildJar still publishes nothing on HIPAA or a BAA.
Ask for the cheapest paid call tracking plan and the answer is Convirza Starter at $29/mo or WhatConverts Call Tracking at $30/mo. Add the two filters that matter to a covered entity — does this vendor publish HIPAA support, and will it sign a Business Associate Agreement? — and both of those drop out immediately. The cheapest tier in this catalog that publishes HIPAA at all is WhatConverts Pro at $100/mo month-to-month. And the cheapest plan with a published signed BAA does not exist as a number: the only two vendors that commit to one — CallRail and Invoca — both put it behind a sales conversation and post no price for it.
What each vendor actually publishes about compliance
| Vendor | Cheapest tier that publishes HIPAA | Base/mo, month-to-month | HIPAA published? | Signed BAA published? |
|---|---|---|---|---|
| WhatConverts | Pro | $100 | yes — from Pro up | no |
| CallTrackingMetrics | Marketing Pro | $179 ($149 billed annually) | yes — from Marketing Pro up | no |
| CallRail | Healthcare account — not a published tier | not posted | yes | yes — through that account |
| Invoca | — | quote-only | yes | yes — platform-wide |
| Convirza | — | — | not established | not established |
| Nimbata, WildJar, Ringba, Infinity, Dialics, Mediahawk | — | — | not published | not published |
And here is the cheap end the question usually starts from — the rungs a buyer sees first, none of which carries HIPAA on the tier you would actually buy:
| Vendor | Cheapest published plan | Base/mo, month-to-month | HIPAA on this tier? |
|---|---|---|---|
| Convirza | Starter | $29 + $0.08/min — a list price, sold through “Get A Demo” | not established |
| WhatConverts | Call Tracking | $30, including a $30 usage credit | no — HIPAA starts at Pro, $100 |
| Nimbata | Pro | $39 ($35 billed annually) | not published |
| CallRail | Lead Tracking | $55 ($50 billed annually) | no — HIPAA rides on a separate Healthcare account |
| CallTrackingMetrics | Marketing Lite | $79 ($65 billed annually) | no — HIPAA starts at Marketing Pro, $179 |
| WildJar | Growth / Agency | $89 + usage (no annual rate published; the tier it calls Starter costs more, $150) | not published |
Every base in the middle column is the month-to-month price, which is the only basis on which these rungs compare honestly. Three of these pages fight that: CallRail’s, Nimbata’s and CallTrackingMetrics’ all load with the billing control already set to annual, so the first figure a visitor sees is the discounted one. WhatConverts, Convirza and WildJar run the other way and publish no annual rate at all — on WildJar’s page the words annual, yearly and per year do not appear once, and its FAQ states monthly subscriptions only. Quoting one vendor’s annual price against another’s monthly is how the old version of this guide misplaced the floor in the first place.
WildJar is the row that has moved out of the cheap end, and it is worth saying why, because the change is one of shape rather than size. Its $89 Growth/Agency plan is a thin platform fee with the most expensive meter on this board bolted to it — $0.10 per call minute, $8.50/mo per local number, $0.06 per SMS, $0.04/min for AI transcription. The tier WildJar actually names Starter is $150/mo, dearer than the plan above it, because it buys an allowance instead: 4 tracking numbers, 500 minutes and AI transcription in the base, with no per-minute rate published for that tier at all — the page states neither an overage rate nor what happens once the 500 minutes are gone. Either way the entry price is well clear of the $29–$55 cluster this question starts from, and neither figure buys a HIPAA posture.
Two corrections to how this category is usually read. First, “not published” is not the same as “absent,” but it is still a disqualifier for a covered entity — Nimbata, WildJar, Ringba, Infinity, Dialics and Mediahawk say nothing about HIPAA, so there is nothing to contract on. Second, and the harder one: a vendor can publish a compliance sentence and still not have established compliance. Convirza is the case in point, and it is worth walking through, because it is the exact claim this guide got wrong.
Convirza’s $29 is not the compliance floor — it is not a compliance answer at all
Convirza’s Caller Privacy page does carry a BAA sentence. Quoted in full, as it appears:
“To help you comply with privacy regulations, Convirza will provide and sign a Business Associate Agreement (BAA), extending our commitment to data protection.”
Four things sit against reading that as a plan term a dental practice or a law firm could rely on.
The contract says the opposite. Clause 15 of Convirza’s terms and conditions reads, verbatim: “Convirza makes no claims or warranties regarding compliance with HIPAA.” Clause 27, the merger clause, voids “any conflicting or additional terms … not set forth herein” — and the terms contain the string “BAA” zero times, using “business associate” only to describe the customer. The document that governs the account disclaims the thing the marketing page offers.
It is a product feature bullet, not a plan term. The sentence is the eighth tile of a “Key Features & Benefits” grid for the Caller Privacy product, under the heading “Partner in Protection”. The page never uses the words plan, tier, Starter, Agency or Enterprise — zero occurrences — and Caller Privacy itself appears in neither of Convirza’s two published plan matrices. There is no tier to attach it to.
We quoted it short. The earlier version of this guide ended the sentence with a full stop after “(BAA)”, dropping a comma and eleven words with no ellipsis. That edit turned a hedged marketing line into a flat commitment.
And there is no $29 to buy. Every tier’s button on Convirza’s pricing page is “Get A Demo”; the strings “sign up”, “free trial”, “buy now” and “add to cart” appear zero times. So the contrast this guide drew — cheap self-serve Convirza against CallRail’s sales-gated Healthcare account — was never real. Both are sales conversations. Convirza’s $29 Starter (plus $0.08/min) is a list price, not a checkout.
None of that makes Convirza non-compliant. It makes Convirza unresolved, which is why our index holds its HIPAA and BAA fields as null. The honest formulation is that the Caller Privacy page is a reason to start the compliance conversation with Convirza, not evidence it will contract one.
CallRail’s BAA is real — just not on the $55 self-serve plan
CallRail is the brand most healthcare buyers are steered toward, and it will sign a BAA. The catch, confirmed in CallRail’s own support documentation, is that HIPAA at CallRail requires a separate Healthcare account — not the standard Lead Tracking ($55/mo month-to-month, or $50 billed annually) tier you would buy off the pricing page. The self-serve tier’s own economics are published and readable in a browser: 250 local minutes and 5 numbers in the base, then $0.06/local-min, $0.08/toll-free-min, $0.03/SMS, $0.02 per form submission and $0.05 per analysis minute, with extra local numbers at $3 ea. and extra toll-free numbers at $5 ea. — the page prints those last two as “$3 ea.” and “$5 ea.” with no billing period attached, so they are a charge per number rather than a monthly line. The Healthcare account’s price is the one figure CallRail does not post anywhere. So CallRail’s compliant price is unpublished and sits above its $55 sticker.
WhatConverts publishes HIPAA — from $100, not $30
WhatConverts is the cheapest published HIPAA posture on the board, but not at the price this guide used to give it. HIPAA appears on the Pro card, and the comparison table ticks a HIPAA Compliance row from Pro upward — that is $100/mo, the third rung of a $30 / $60 / $100 / $160 ladder, every rung of which includes a $30 usage credit. There is no annual discount to quote: the page’s segmented control picks a business type, not a billing period, and every figure on it is labelled “/mo”. Usage runs $0.045/local-min, $0.065/toll-free-min and $0.03/SMS on top.
What WhatConverts does not publish is a BAA — the term appears nowhere on the pricing page. So a covered entity gets a published HIPAA posture at $100/mo and still has to negotiate the document that makes it lawful.
CallTrackingMetrics buries compliance in the mid-tier
CallTrackingMetrics is the clearest “headline price ≠ compliant price” case. Its entry plan, Marketing Lite at $79/mo month-to-month ($65 billed annually), carries no HIPAA — and no sub-accounts either. The HIPAA/GDPR feature appears only from Marketing Pro at $179/mo ($149 billed annually) and up, and even there CTM publishes the compliance feature, not a signed-BAA commitment. So CTM’s effective compliance entry is not its $79 sticker; it is $179, and the BAA itself is still a sales conversation.
One thing not to read into that tier: Marketing Pro’s 3,000 transcribed minutes are not a monthly allowance. CTM’s page states they are per sub-account and do not renew each month, with transcription past them at $0.02/min. They are a one-time transcription bundle, not a recurring pot of call minutes.
The quote-only confirmation
Invoca confirms HIPAA with SOC 2 Type 2, PCI DSS, and BAA support, published platform-wide rather than gated to a tier — but it publishes no plans at all; pricing is sales-gated and scaled by annual phone-number volume into the thousands. It belongs in the compliance conversation but not the cheapest-plan one, because there is no published figure to compare.
How to read this
If you need a published HIPAA posture at a price you can see, the floor is WhatConverts Pro at $100/mo month-to-month, with CallTrackingMetrics Marketing Pro at $179 ($149 billed annually) the next rung up. If you need a signed BAA, this category has no published price for one: CallRail and Invoca are the only vendors that commit to signing, and CallRail’s rides on a separate, unpriced Healthcare account while Invoca is quote-only enterprise. Convirza’s $29 is not the answer it looked like — a marketing-page BAA sentence sitting over a contract that disclaims HIPAA is a reason to open a conversation, not a compliance credential, and there is no self-serve $29 in any case. The lesson this guide learned the hard way is that the compliance filter does not merely move the price up; it moves the whole question off the pricing page and into a contract. Confirm the BAA in writing with any vendor before you route PHI through a tracking number. (For the same trap in a single-practice setting, see call tracking for a HIPAA dental office.)