The real EHR bill: subscriptions, clearinghouse, texting, storage

The short answer: the subscription is the smallest line

The advertised EHR subscription price is typically the smallest line on the real bill — clearinghouse fees for claims submission, secure texting or messaging add-ons, e-fax, additional storage, a telehealth module, and e-prescribing each often price separately, and several of them scale with patient volume rather than staying flat. A practice budgeting only the sticker subscription price routinely finds the actual monthly total running well above it.

Itemizing every one of these pieces before committing — the same discipline the startup budget applies to launch costs generally 1Ref 1U.S. Small Business Administration (2026).Calculate your startup costs.SBA's method for itemizing startup costs — supports the claim that every EHR-related line item should be itemized the same disciplined way. — is what turns "what does an EHR cost" from a guess into a number a practice can actually plan around. A practice easing in through the part-time launch may not need every add-on on day one, but pricing them out in advance avoids a surprise later when volume picks up.

What the base subscription typically includes

The base subscription usually covers the chart itself — notes, scheduling, a client portal — and often a set number of user seats or a flat solo-practice rate. What frequently isn't included: claims submission through a clearinghouse, e-prescribing, telehealth, secure client messaging beyond basic portal messages, and any storage beyond a baseline allotment.

Choosing an ehr for one is often decided during the same 12-month runway as credentialing and payer enrollment, and running every prospective vendor through the demo script, not just its pricing page, is how these bundling differences actually surface — vendors vary widely on where they draw the line between included and add-on, and the same feature can be free with one system and priced separately with another.

E-prescribing in particular is worth checking closely, since some vendors bundle it into the base tier while others price it as a controlled-substance-specific add-on with its own per-provider fee.

The clearinghouse and billing line items

Submitting claims almost always runs through a clearinghouse, whether it's bundled into the EHR's own billing module or a separate vendor the practice connects independently, and clearinghouse fees are typically priced per claim or as a flat monthly access fee — a real, recurring cost that a bare EHR subscription quote often doesn't include.

This is the same cost surface as the 4–8% question: choosing to bill in-house through the EHR's own module still means paying the clearinghouse fee underneath it, so that line item belongs in the comparison regardless of which billing path the practice chooses.

Texting, secure messaging, and e-fax

Texting a patient about a schedule change, sending a secure message through a portal, or faxing records to another provider each need to run through a HIPAA-compliant channel, and most EHRs price these as separate add-ons rather than folding them into the base subscription — a solo practice using all three regularly can find this category alone adding a meaningful line to the monthly bill.

Any of these vendors handling PHI on the practice's behalf is a business associate and needs a signed BAA before use, not just a payment 2Ref 2HHS Office for Civil Rights (2026).Business Associates.That a vendor handling PHI on the practice's behalf is a business associate requiring a signed BAA — supports the claim that texting, messaging, and e-fax add-ons must offer a BAA, not just a low price. — which means the real evaluation isn't just the sticker price of the texting add-on, but whether the vendor offers a BAA at all, since a cheaper consumer-grade tool without one isn't a legitimate option regardless of cost.

A practice that texts appointment reminders through a personal cell phone rather than a compliant platform is taking on exactly the exposure this add-on category exists to avoid — the monthly fee is the cost of closing that gap, not an optional convenience charge.

Storage, backup, and the cost of switching later

Storage beyond a baseline allotment, automated backup, and audit-log retention are frequently tiered pricing add-ons rather than included, and they tend to grow quietly as a chart accumulates years of notes, attachments, and audio. Reviewing the storage tier annually, rather than assuming the plan chosen at launch still fits years in, avoids a surprise upgrade charge.

The cost that catches practices off guard is the ehr migration if the practice ever switches systems — some vendors charge a data-export or migration fee, and patients themselves are separately owed a right to inspect and copy their own records within 30 days for a reasonable cost-based fee, a different obligation from a vendor's own export pricing but worth knowing the distinction between 3Ref 3HHS Office for Civil Rights (2026).Individuals' Right under HIPAA to Access their Health Information.That patients may obtain copies of their records within 30 days for a reasonable cost-based fee — supports distinguishing a patient's records-access right from a vendor's own EHR-migration export fee..

Backup and redundancy are worth confirming explicitly rather than assumed — some vendors include automated daily backup in the base price while others price it as a separate tier, and the difference only becomes visible the day a restore is actually needed.

The telehealth module — and why it isn't just a video app

A telehealth add-on needs to run on a HIPAA-compliant arrangement now that the COVID-era enforcement discretion has ended, which rules out pricing a bare video-conferencing app against a dedicated telehealth module without accounting for the compliance gap between them 4Ref 4HHS Office for Civil Rights (2026).HIPAA and Telehealth.That telehealth must run on a HIPAA-compliant arrangement now that COVID-era enforcement discretion has ended — supports the claim that a bare consumer video app can't be compared to a compliant telehealth module on price alone.. The module's price should be compared against what a compliant setup actually requires, not against a free consumer app that was never a real option.

Confirming the telehealth vendor will sign a BAA is part of the same evaluation as the texting and messaging add-ons — a telehealth feature bundled "free" into the base subscription is only actually free if it also meets that bar, not a savings if it has to be replaced with a compliant option later.

Budgeting the real number before you commit

The Security Rule requires safeguards scaled to the size of the practice, anchored in a risk analysis 5Ref 5HHS Office for Civil Rights (2026).Summary of the HIPAA Security Rule.That the Security Rule requires safeguards scaled to practice size, anchored in a risk analysis — supports running a risk analysis before choosing an EHR stack., and HHS's 405(d) program publishes a cybersecurity baseline sized for a practice this size 6Ref 6HHS 405(d) Program (2026).HHS 405(d) — Aligning Health Care Industry Security Approaches.That HHS's 405(d) program publishes a cybersecurity baseline sized for a small practice — supports using that baseline to judge which EHR add-ons are genuinely required. — running that free analysis before choosing a stack, using ONC/OCR's own Security Risk Assessment tool, surfaces which add-ons are genuinely required versus optional before a single dollar is committed 7Ref 7Office of the National Coordinator / ASTP (2026).Security Risk Assessment Tool.That ONC/OCR publish a free Security Risk Assessment tool sized for small practices — supports running it before committing to a specific EHR stack..

Adding every line — subscription, clearinghouse, texting, e-fax, storage, telehealth — into one real monthly number, the same way the startup budget totals every other launch expense, is what makes the EHR line in a practice's budget accurate instead of aspirational from month one.