Zero clients: Uses the smallest eligible subscription; no separate zero-client discount established.
Above the published ladder: not published; never extrapolated.
Workflow
Status
Documented — Coach assigns recurring habits; clients record completion; coach sees trends. FAQ explicitly includes habits on Free.12
Free
Free — Habit tracking included free for 3 clients; paid currency unconfirmed.12
Client-side charges
Not established — not in the amount
Platform
Not recorded
Observed in an account
No. Everything on this page is documented from the vendor's pages and store listings that were read.
What we could not establish
Paid currency code unconfirmed.
Studio unlimited coach seats; other annual totals not established.
No regulatory suitability assessment.
Regulated use — lay reading
Lay reading. What each vendor's own pages say about US HIPAA and Ontario PHIPA, read by habit.report, without legal training. Not legal advice. A vendor's account of the law is not a source for the law. Each feature is assessed separately; evidence for one never covers another.
US HIPAA-covered activity
Not assessed — Contractual and operational suitability has not been assessed.
Ontario PHIPA-subject activity
Not assessed — Contractual and operational suitability has not been assessed.
Regulatory features — what the vendor's pages state
Data entry
Not stated
Hosting
Vendor states: Application data is stored on Google Cloud (Firebase) infrastructure in the United States; traffic is encrypted in transit and stored data is encrypted at rest; each coaching business has an isolated workspace with server-side authorization.3· checked 21 Oct 2026
Messages
Vendor states: Messages are listed among the data coaches own.3· checked 21 Oct 2026
Notifications
Not stated
Attachments
Vendor states: Photos are listed among coach-owned data (with check-ins, messages and analytics).3· checked 21 Oct 2026
Video
Not stated
Exports
Vendor states: The vendor says "CoachingPortal does not currently offer bulk data export"; coaches and clients can self-delete accounts and data from in-app settings, with backups cleared within a 30-day retention window.3· checked 21 Oct 2026
Integrations
Vendor states: Sub-processors named: Google Cloud (Firebase) for hosting, Stripe for billing, Resend for platform emails, third-party AI model providers for optional features, Vercel Analytics in the logged-in product, a managed identity provider, and Google Analytics 4 on the marketing site only.3· checked 21 Oct 2026
AI features
Vendor states: The vendor says it does not train AI models on coaching content, client check-ins, messages or progress data; for optional AI-assisted features, third-party model calls are scoped to the specific request and the providers are not used to train shared models.3· checked 21 Oct 2026
US business associate agreement
Vendor states: The vendor says "We do not currently sign Business Associate Agreements (BAAs)", that medical use is not supported.3· checked 21 Oct 2026
Canada or Ontario
Not stated
Evidence
1. CoachingPortal plans · coachingportal.io/pricing Vendor page · Read 20 Oct 2026 · No copy saved Published plan details; see saved PRICING-PASS-4.json. Paid currency code unconfirmed. Studio unlimited coach seats; other annual totals not established. No regulatory suitability assessment.
2. CoachingPortal habit tracking · coachingportal.io/habit-coaching-software Vendor page · Read 20 Oct 2026 · No copy saved Coach assigns recurring habits; clients record completion; coach sees trends. FAQ explicitly includes habits on Free.
3. CoachingPortal trust and security · coachingportal.io/trust Vendor page · Read 21 Oct 2026 · No copy saved Page read 2026-10-21 (plain fetch). Application data stored on Google Cloud (Firebase) infrastructure in the United States; encrypted in transit and at rest; isolated workspace per coaching business with "Authorization is enforced server-side on every request"; "We do not currently sign Business Associate Agreements (BAAs)" and Medical use is not supported; not SOC 2 audited; "CoachingPortal does not currently offer bulk data export"; coaches and clients can self-delete accounts and associated data from in-app settings, removed from active systems immediately and from backups within the standard 30-day backup retention window; messages, check-ins, photos and analytics are coach-owned data; Resend for platform emails; third-party AI model providers for optional features ("We do not train AI models on your coaching content, client check-ins, messages, or progress data"; calls "scoped to the specific request"; providers not used to train shared models); sub-processors listed (Firebase, Stripe, Resend, Vercel Analytics, a managed identity provider; GA4 on the marketing site only).