Is GoHighLevel legit? Company facts, security claims, HIPAA and refund terms

GoHighLevel is a legitimate company, with terms you should read first

Yes, GoHighLevel is legit: it is real, paid software sold by HighLevel LLC, a Dallas, Texas company that publishes its prices and terms and states that it undergoes annual security audits. It is not a scam. It does have strict billing terms, and it is not HIPAA compliant unless you buy an add-on.

The points that catch buyers out are plain in its own documents. Every fee is non-refundable. Subscriptions renew automatically. Phone, text and email usage is billed on top of the plan. The rest of this page sets out what the company states, with the page each fact comes from. This site has not used the product hands-on; everything here is from published documents.

Who is behind GoHighLevel

The two Dallas addresses differ between the About page and the Terms. These facts come from the company itself. No state business registry record was checked for this page.

Security statements: SOC 2, ISO 27001 and encryption

HighLevel states that it undergoes annual SOC 2 Type II assessments. Its security overview lists an ISO/IEC 27001:2022 certificate as available through its trust center. The same article says data at rest is encrypted with AES-256, data in transit uses TLS 1.2 or 1.3, product infrastructure sits in the United States and penetration tests run every year.

It also says it does not store card data itself and relies on PCI-compliant payment processors. On GDPR the wording is careful: the platform provides features that help customers meet their own obligations. That is not a promise that your use of it is compliant.

Is GoHighLevel HIPAA compliant?

Not by default. HighLevel's help article says accounts are not HIPAA compliant unless the HIPAA option is switched on. HIPAA is a paid add-on at $297 per month, as read on 3 October 2026. It applies to the whole agency account, comes with a business associate agreement, and is open to agencies on any plan, including the $97 Starter plan. The pricing page also lists HIPAA compliance under its Enterprise plan.

Two details matter before a clinic or med spa buys it. The add-on makes the total at least $394 per month on Starter. And the article says that once enabled it is permanent: it cannot be canceled, refunded, removed or downgraded. The add-on covers the platform. Your own staff practices and message content remain your responsibility. The med spa page works through this cost.

Billing, refund and cancellation terms

• Refunds: the Terms say all fees are non-refundable, including subscription fees and communication surcharges. The billing help article says refund requests are reviewed by the billing team, not granted automatically.
• Wallet balance: unused wallet funds can be requested within 30 days of account termination. After that they are forfeited.
• Renewal: subscriptions renew automatically at the rate then current.
• Cancelling: go to Agency Settings, then Billing, then the modify or cancel option. The Terms also allow a support ticket or a phone call. Fees stay due until cancellation is processed.
• Pause: a $27 per month Pause Plan is offered as an alternative to canceling.
• After canceling: account data is kept for 90 days. Phone numbers and A2P registrations are deleted after 14 days, and numbers are still charged during those 14 days.
• Trials: the trial is 14 days. Back-to-back trials are not allowed.

The practical step is to set a reminder before the trial ends and export what you need before canceling. The cost page lists the usage charges that sit outside the plan price.

What reviewers complain about

On Trustpilot, read on 3 October 2026, gohighlevel.com showed a TrustScore of 4.9 out of 5 from 15,132 reviews, with 97% five-star and 2% one-star. Trustpilot's own summary of the low ratings names four themes: a steep learning curve, slow support replies, restrictive policies and the cost of onboarding. Trustpilot is an independent site, and its reviews are user opinions, not audited facts.

Those themes match the documents. The product has many features, the refund terms are strict and usage is billed separately. A buyer who reads the terms and runs a short test with real leads is unlikely to be surprised. The pilot decision page gives a way to run that test, and the review covers who the product suits.