If you received a notice from LuxSci that your WordPress or web hosting account is being shut down, you’re not alone — and you’re in the right place. LuxSci is reportedly sunsetting its web hosting services for certain legacy accounts — based on customer notices — to focus on its core specialties: HIPAA-compliant email security and enterprise encryption. Healthcare organizations that hosted their websites or patient portals with LuxSci need to migrate to a new HIPAA-compliant hosting provider before their shutdown date (later this year depending on your account).
HIPAA Vault is available to help LuxSci hosting clients migrate to a HIPAA-compliant environment. If you need to move quickly, schedule a free migration consultation →
For those evaluating LuxSci’s email services — those continue unchanged. Here’s the full picture.
LuxSci offers HIPAA-compliant email and healthcare communication services, provides Business Associate Agreements (BAAs), and maintains HITRUST CSF certification. Whether your organization’s use of LuxSci complies with HIPAA depends on the specific services you use, your configuration, your BAA, and your own administrative and technical safeguards. LuxSci offers Business Associate Agreements and provides HIPAA-compliant email hosting, secure messaging, and web services specifically designed for healthcare organizations. It is one of the few email providers purpose-built for regulated industries rather than adapted from a general-purpose platform.
LuxSci shutting down your hosting? HIPAA Vault provides managed HIPAA-compliant WordPress and Linux hosting with a signed BAA — free migration included, 30-day trial on WordPress plans.
Schedule a free migration call → | View hosting plans →
- LuxSci is HIPAA compliant — BAA available, purpose-built for healthcare and regulated industries
- Trusted by 2,000+ healthcare organizations — HITRUST certified with BAA available — LuxSci states “BAA Included for All Customers” for its current product lines
- Key services: HIPAA-compliant email hosting, SecureSend encrypted email delivery, SecureForm, web hosting
- LuxSci covers email — your hosting environment, file transfer, and cloud infrastructure need their own HIPAA compliance and BAA
- LuxSci is primarily an email security company — not a full-stack hosting provider
- HIPAA Vault is a strong complement to LuxSci — covering infrastructure where LuxSci focuses on email
What Is LuxSci?
LuxSci is a HIPAA-compliant email and web services provider founded in 1999, operating under the HIPAA Privacy Rule and Security Rule requirements. It specializes in secure email hosting for regulated industries — healthcare, legal, financial services, and government organizations that require HIPAA, GLBA, or FINRA compliance.
LuxSci’s core HIPAA-relevant services include:
- HIPAA-compliant email hosting — encrypted email accounts for healthcare organizations
- SecureLine™ — LuxSci’s proprietary encryption technology that automatically selects TLS, secure portal, PGP, or S/MIME per recipient
- SecureSend — encrypted email delivery for sending PHI to patients and partners
- SecureForm — HIPAA-compliant web forms for collecting patient information
- SecureLine — encrypted messaging platform
- HIPAA-compliant web hosting — legacy service being sunset for certain accounts (verify your account status with LuxSci)
- Email archiving — for compliance and eDiscovery
LuxSci’s focus is primarily email security and delivery — it is not a full-stack cloud infrastructure provider.
Don’t Trust Patient Data to Standard Web Hosting
Protect your practice from breaches and fines. Our hosting includes intrusion detection, firewalls, and audit logs.
Learn MoreIs LuxSci HIPAA Compliant? (And What to Do If Your Hosting Is Being Shut Down)
Yes. LuxSci provides:
- Business Associate Agreement (BAA) — available and included with HIPAA-compliant plans
- Encryption in transit and message-level encryption options — using TLS for transport and S/MIME or PGP for message-level encryption
- Encryption at rest — stored messages and data encrypted per NIST SP 800-111 standards
- Audit logging — email access and delivery logs for compliance monitoring
- Access controls — role-based permissions and multi-factor authentication support per NIST SP 800-63B standards
- HITRUST certification — one of the most rigorous healthcare security certifications, covering HIPAA, NIST, and ISO controls
- HIPAA-specific configuration options — settings designed for healthcare compliance workflows
LuxSci has been serving healthcare organizations since 1999 — making it one of the most experienced HIPAA-compliant email providers in the market.
LuxSci Plan Overview
LuxSci offers tiered plans for individuals, small practices, and enterprise healthcare organizations. Key features for HIPAA compliance:
| Feature | Availability |
| BAA | ✅ Included on HIPAA plans |
| Encrypted email at rest | ✅ Yes |
| TLS encryption in transit | ✅ Yes |
| S/MIME / PGP support | ✅ Yes |
| SecureSend (encrypted delivery) | ✅ Yes |
| Audit logging | ✅ Yes |
| MFA support | ✅ Yes |
| HITRUST certified | ✅ Yes |
| Web hosting | ✅ Available |
| Full cloud infrastructure | ❌ Not primary focus |
Verify current plan names, features, and pricing directly at luxsci.com before purchasing.
How LuxSci Compares to Other HIPAA Email Providers
| Provider | BAA? | Primary Focus | Healthcare-Specific? | Starting Price |
| LuxSci | ✅ Yes | Email security + web hosting | ✅ Yes — regulated industries | from $50/mo for Secure Gateway (up to 5 users); transactional email packages from $99/mo |
| Paubox | ✅ Yes | HIPAA email delivery | ✅ Yes — healthcare only | ~$29/mo (3 users) |
| Google Workspace | ✅ Yes (with BAA) | General productivity + email | ⚠️ General + healthcare | $6–$18/user/mo |
| Microsoft 365 | ✅ Yes (via DPA) | General productivity + email | ⚠️ General + healthcare | $6–$22/user/mo |
Pricing verified August 2026 — verify current pricing directly with each provider.
What LuxSci Does NOT Cover
LuxSci is an email and web services provider. It does not cover:
- Full cloud hosting infrastructure — if you run healthcare applications, databases, or patient portals on separate infrastructure, those environments need their own HIPAA compliance and BAA
- SFTP file transfer — for moving PHI between organizations securely
- Intrusion detection and 24/7 security monitoring at the infrastructure level
- Kubernetes or containerized application hosting — for healthcare SaaS or app development
As Gil Vidals, CTO and co-founder of HIPAA Vault, explains about the layered nature of HIPAA compliance:
“You need a BAA signed with every vendor that qualifies as a business associate — those that create, receive, maintain, or transmit PHI on your behalf. It’s more than just a checkbox. It’s the legal document that defines who’s responsible for what if there’s ever a breach. And it has to cover every layer — email, hosting, file transfer. Each one is separate.”
This means using LuxSci for HIPAA-compliant email is a smart choice — but your hosting provider, file transfer system, and any other technology handling PHI still needs its own BAA and compliance evaluation.
LuxSci vs HIPAA Vault: Different But Complementary
LuxSci and HIPAA Vault serve different but complementary functions in a healthcare technology stack:
| LuxSci | HIPAA Vault | |
| Primary focus | Email security and delivery | Hosting and cloud infrastructure |
| Web hosting | ✅ Available | ✅ Core product |
| SFTP file transfer | ❌ Not primary | ✅ Core product |
| Intrusion detection | ❌ Not primary | ✅ Included — IDS/IPS |
| WAF | ❌ Not primary | ✅ Included |
| Kubernetes/cloud apps | ❌ Not primary | ✅ Core product |
| BAA | ✅ Yes | ✅ Yes — every plan |
| Compliance manager | ⚠️ Verify with LuxSci | ✅ Yes — every plan |
| Founded | 1999 | 1997 |
| Best for | Organizations needing specialized email security | Organizations needing full-stack HIPAA infrastructure |
Some healthcare organizations use both — LuxSci for specialized email encryption features alongside HIPAA Vault for hosting and infrastructure. Others consolidate with a single provider that covers both.
As Gil Vidals explains about evaluating any HIPAA email provider:
“The question I always ask is: what happens to the data after it leaves the inbox? Is it encrypted at rest? Who has access to the server? Is there audit logging? A BAA is the legal foundation — but the technical controls underneath have to actually be there. Email is one of the highest-risk PHI channels we see.”
What to Verify Before Using LuxSci for PHI
Before using LuxSci for any communication involving PHI:
[ ] Execute a BAA with LuxSci — confirm it covers the specific services you will use
[ ] Confirm which plan includes HIPAA BAA support
[ ] Enable encryption at rest and in transit on your account
[ ] Configure MFA for all accounts with PHI access
[ ] Enable and review audit logging
[ ] Verify that SecureSend or equivalent encrypted delivery is configured for outbound patient communications
[ ] Confirm retention policies meet your organization’s legal, contractual, and clinical-record retention requirements — HIPAA’s six-year rule applies to required HIPAA documentation, not all PHI
[ ] Evaluate whether your hosting environment also needs its own HIPAA compliance and BAA
⚠️ LuxSci WordPress & Web Hosting Shutdown — What to Do Now
Based on customer notices received by some LuxSci hosting accounts, LuxSci is discontinuing certain WordPress and web hosting services. The scope of this sunset has not been confirmed in a public LuxSci announcement — verify your specific account status directly with LuxSci.
Why this matters for HIPAA compliance: LuxSci’s hosting was HIPAA-compliant — meaning your website or patient portal was covered under a BAA with LuxSci. When that hosting ends, so does that BAA coverage. You cannot simply move to a hosting provider that does not sign a BAA and provide appropriate security safeguards — whether that is HIPAA-compliant depends on the specific provider and deployment, not the brand name alone.
What you must do before your shutdown date:
- Identify a HIPAA-compliant hosting provider that will sign a BAA
- Migrate your WordPress site, databases, and files
- Verify the new environment has equivalent security controls (encryption, audit logging, WAF, IDS)
- Confirm the new BAA is in place before your LuxSci hosting terminates
- Update any integrations, email configurations, and DNS settings
Why HIPAA Vault: HIPAA Vault provides fully managed HIPAA-compliant WordPress hosting — the same type of environment LuxSci was providing, with a signed BAA on every plan. We’ve migrated multiple LuxSci hosting clients already and can move quickly for organizations with tight deadlines.
✅ Signed BAA on every plan — no enterprise tier required
✅ Fully managed — we handle security controls, patching, and monitoring
✅ WordPress and Linux HIPAA hosting
✅ Free migration included — up to 2 hours of migration work
✅ 30-day trial on WordPress plans
✅ Plans starting at $120/month
LuxSci shutting down your hosting? HIPAA Vault provides the same category of service — managed HIPAA-compliant WordPress hosting with a signed BAA. We’re available to help LuxSci clients migrate immediately.
Schedule a free migration call → | View hosting plans →
Frequently Asked Questions
LuxSci product information reflects publicly available details as of August 2026 — verify current features, BAA terms, and pricing directly at luxsci.com before purchasing. This article is educational and does not constitute legal advice.
