# Modern Therapist's Consumer Guide: Paubox. HIPAA Compliant Email, Secure Communication, and Practice Privacy. An Interview with Hoala Greevy, Founder and CEO of Paubox Page: https://stenobird.com/podcast/the-modern-therapist-s-survival-guide-with-curt-widhalm-and-katie-vernoy-410171/modern-therapist-s-consumer-guide-paubox-hipaa-compliant-email-secure-communication-and-practice-privacy-an-interview-with-hoala-greevy-founder-and-ceo-of-paubox Text version: https://stenobird.com/podcast/the-modern-therapist-s-survival-guide-with-curt-widhalm-and-katie-vernoy-410171/modern-therapist-s-consumer-guide-paubox-hipaa-compliant-email-secure-communication-and-practice-privacy-an-interview-with-hoala-greevy-founder-and-ceo-of-paubox.md Podcast: [The Modern Therapist's Survival Guide with Curt Widhalm and Katie Vernoy](https://stenobird.com/podcast/the-modern-therapist-s-survival-guide-with-curt-widhalm-and-katie-vernoy-410171) Published: 2026-05-28T07:00:00+00:00 Episode link: https://traffic.megaphone.fm/HEGNI3362307188.mp3 Audio file: https://traffic.megaphone.fm/HEGNI3362307188.mp3 Processing state: not_requested JSON: https://stenobird.com/v1/public/podcasts/the-modern-therapist-s-survival-guide-with-curt-widhalm-and-katie-vernoy-410171/episodes/modern-therapist-s-consumer-guide-paubox-hipaa-compliant-email-secure-communication-and-practice-privacy-an-interview-with-hoala-greevy-founder-and-ceo-of-paubox Duration seconds: 2550 ## Resource Modern Therapist's Consumer Guide: Paubox. HIPAA Compliant Email, Secure Communication, and Practice Privacy. An Interview with Hoala Greevy, Founder and CEO of Paubox Curt and Katie talk with Hoala Greevy, Founder and CEO of Paubox, about what HIPAA compliant email actually requires, where standard Google Workspace and Microsoft 365 Business Associate Agreements leave gaps, and why most secure-portal solutions fail at the inbox. Paubox is a HIPAA compliant email security platform built to deliver encrypted messages straight to the recipient's inbox, without portals, plugins, or extra clicks. Hoala explains how Paubox wraps around the email systems therapists already use, why domain ownership and TLS encryption matter, and how inbound threats like display-name spoofing affect small practices. The conversation also covers HITRUST certification, AI scraping, the Paubox Foundations, the Paubox Kahikina Scholarship supporting Native Hawaiian students in STEM, and how to evaluate a HIPAA compliant email vendor on security, reliability, and ease of use. This episode is part of our Modern Therapist's Consumer Guide series. While this interview is a paid partnership, our discussion and opinions are our own. In this episode, we discuss: - Where standard Google and Microsoft BAAs leave HIPAA compliant email gaps - Why most secure-portal solutions never get read on mobile - How TLS encryption and secure email delivery actually work - What domain ownership has to do with HIPAA compliance - How Paubox integrates with Google Workspace and Microsoft 365 - Inbound threats, display-name spoofing, and ExecProtect - HITRUST certification and how to evaluate a HIPAA compliant email vendor Timestamps: - 02:18 – What Paubox does and why it was created - 05:19 – Mission, vision, and the Paub… ## Actions - request_transcript: `POST https://stenobird.com/v1/public/podcasts/the-modern-therapist-s-survival-guide-with-curt-widhalm-and-katie-vernoy-410171/episodes/modern-therapist-s-consumer-guide-paubox-hipaa-compliant-email-secure-communication-and-practice-privacy-an-interview-with-hoala-greevy-founder-and-ceo-of-paubox/transcription-requests` — Idempotently request low-priority transcript generation for this episode. - read_markdown: `GET https://stenobird.com/podcast/the-modern-therapist-s-survival-guide-with-curt-widhalm-and-katie-vernoy-410171/modern-therapist-s-consumer-guide-paubox-hipaa-compliant-email-secure-communication-and-practice-privacy-an-interview-with-hoala-greevy-founder-and-ceo-of-paubox.md` — Read the agent-friendly Markdown representation of this episode resource. A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed. ## Transcript Full transcripts are not published on public pages unless there is a clear rights basis.