If you run a medspa and you've been Googling "Jobber vs Corex," you've probably noticed something weird: the comparison doesn't quite make sense once you dig in. One of these is field service software built for plumbers and landscapers. The other is a local marketing and AI-answering service. Neither one was built to hold patient charts, consent forms, or before-and-after photos. And in a medspa, those photos and forms are protected health information whether your software vendor says so or not.
This post is going to walk through what Jobber actually is, what Corex actually is, why the "vs" framing breaks down for clinical work, and what a HIPAA-aware alternative looks like in practice, with real numbers.
The problem: software built for trucks, not treatment rooms
Jobber is field service management software. It's built for businesses that dispatch techs to job sites: HVAC, landscaping, cleaning, electrical. It does scheduling, invoicing, quoting, and route tracking well. None of that is wrong for a service business. It's just not built around patient intake, consent documentation, or treatment charting, because that was never the job it was hired to do.
Corex Solutions, on the other hand, isn't a CRM or scheduling platform at all in the Jobber sense. Based on its own site, it positions itself as a marketing and visibility vendor: websites, local SEO, Google Business Profile management, and an AI tool that answers calls, books appointments, and sends reminders. That's a legitimate and useful service for a lot of local businesses. But nowhere on its site does it mention HIPAA, Business Associate Agreements, or handling of medical records. It lists a client called "MedSpa One" as a testimonial, which just means a medspa used their marketing services, not that the platform was engineered to store or transmit patient data safely. So the real issue isn't "which one wins." It's that a medspa owner comparing these two is solving the wrong problem. You need two different things working together: a front desk/marketing layer and a clinical records layer that doesn't put you at risk the first time a state board or a patient's attorney asks who had access to a photo of their face.
The real cost of getting this wrong
Here's where owners get burned. You sign up for a general-purpose tool because the sales page is clean and the price is attractive, then six months later you realize your consent forms, medical history intake, and injection site photos are sitting in a system with no Business Associate Agreement, no documented access controls, and no audit log. If that data gets exposed, breach notification obligations and potential liability aren't hypothetical. They are real HIPAA risks tied to how protected health information gets stored and shared, not abstract compliance theater. The time cost is just as real. Front desk staff manually re-entering intake forms into a separate charting system because the booking tool doesn't talk to anything clinical. Techs texting photos to each other because there's no secure photo storage built in. None of that shows up on a pricing page, but it shows up in your labor costs and your risk exposure every single week.
What a HIPAA-aware stack actually requires
When you're evaluating software for a medspa, the checklist isn't "does it book appointments." It's:
- Will the vendor sign a Business Associate Agreement (BAA)?
- Is patient data encrypted at rest and in transit?
- Are there role-based access controls and audit logs so you know who viewed what, and when?
- Are before-and-after photos treated as protected health information, not just marketing assets?
- Does the platform support electronic forms, SOAP notes, consent documents, and client records inside one system, so nothing gets copy-pasted between tools?
That last point matters more than it sounds. The more times patient data gets moved between systems (booking tool, texting app, separate EMR, shared drive for photos), the more places it can leak, and the harder it is to prove compliance if you're ever audited.
Where Boulevard fits (and where it doesn't)
Boulevard is one of the more commonly cited medspa/salon platforms built with this in mind. Its Aesthetics-tier plans specifically include forms and charts, photo markup, and HIPAA compliance as named features, not an afterthought bolted onto a generic scheduler. The Aesthetics Premier tier includes unlimited professionals, 250 free texts, 1,000 free email blasts, and 50 GB of storage. The Aesthetics Prestige tier steps up to 2,500 free texts, 10,000 free email blasts, and 100 GB of storage, per pricing published on G2's Boulevard pricing page. To be fair about the limits: reviews from medical practice users on that same page flag gaps for full EMR workflows. If you're running a practice that needs deep clinical charting at the level of a full electronic medical record system, Boulevard alone may not be the complete answer. It's strong for the booking, client management, and HIPAA-aware photo/consent side of a medspa, but it's not a substitute for dedicated EMR software if your clinical documentation needs go deep.
Cost comparison: what you're actually paying for
| Platform | Starting price | Built for clinical/HIPAA use? | Best fit |
|---|---|---|---|
| Jobber (Core plan) | ~$29-49/mo (1 user, pricing varies by term and promo) | No, no HIPAA or BAA language anywhere in its offering | Trade/field service businesses: HVAC, landscaping, cleaning |
| Corex Solutions | Not published as a line-item SaaS plan; bundled website/SEO/AI-answering service | No, no HIPAA or BAA mentioned on its site | Local businesses wanting marketing, SEO, and AI call answering |
| Boulevard (Essentials) | $159/mo | Not specified at this tier | Salons/spas without clinical photo or consent needs |
| Boulevard (Aesthetics Premier) | $364/mo | Yes, named HIPAA compliance, forms/charts, photo markup | Medspas needing consent forms and secure photo storage |
| Boulevard (Aesthetics Prestige) | $416/mo | Yes, same HIPAA features plus higher texting/email/storage limits | Multi-provider medspas with higher client volume |
Jobber's exact pricing shifts with promotions and commitment terms, so treat the figures above as approximate and verify directly before you buy. Same caveat applies to Boulevard: always confirm current pricing on the vendor's own page before signing anything.
Step-by-step: how to actually fix this
- Separate your two problems. Marketing and front-desk booking is one job. Clinical documentation and HIPAA-sensitive data storage is a different job. Stop looking for one tool to do both unless it explicitly names HIPAA compliance as a feature.
- Ask every vendor directly: "Will you sign a BAA?" If the answer is unclear, slow, or buried in a sales call instead of published plainly, that's your answer.
- Audit where your before-and-after photos live right now. If they're in a generic CRM, a shared phone, or a marketing tool's media library, that's exposure you're carrying today, not a future risk.
- If your clinical documentation needs are light (standard consent forms, basic intake, photo markup), a platform like Boulevard's Aesthetics tier can cover both booking and HIPAA-aware storage in one place.
- If you need deeper clinical charting, treat your booking/marketing tool and your EMR as two systems that need to sync, not one system that does everything.
- Reassess your front desk workload. If staff are manually entering the same client information into two or three places, that's a sign your stack isn't actually integrated, regardless of what the sales page promised.
On the marketing and intake side specifically, this is the gap a lot of medspas fall into: the booking tool answers the phone fine, but it was never designed around the compliance questions a clinical practice has to answer. If you're rebuilding your front-end stack anyway, it's worth looking at systems built with medical and wellness practices in mind rather than retrofitting a trades-focused tool. Features like AI-handled call answering and booking paired with a proper CRM built for client and lead tracking can cover the front-of-house side, while your HIPAA-aware platform like Boulevard handles the clinical documentation. The two should talk to each other, not compete for the same job.
FAQ
Is Jobber HIPAA compliant?
Nothing in Jobber's published pricing or feature set is built around HIPAA requirements. It's designed for field service trades like HVAC and landscaping. If you're storing patient consent forms or treatment photos, that's not the job Jobber was built to do, and you should confirm directly with the vendor before trusting it with anything protected health information related.
Is Corex Solutions a medical practice platform?
No. Based on its own site, Corex Solutions offers websites, local SEO, Google Business Profile management, and AI-based call answering and appointment booking. It makes no HIPAA or BAA claims anywhere on its site. It lists a medspa as a client example, which reflects marketing use, not clinical data handling capability.
What does "HIPAA-aware" actually mean for software I buy?
At minimum: the vendor will sign a Business Associate Agreement, patient data is encrypted, access is role-based with audit logs, and photos or forms containing identifiable patient information are treated as protected health information rather than generic media files. If a vendor can't speak clearly to all four, don't assume compliance just because they use the word "secure" somewhere on their site.
Do I need a full EMR, or is a platform like Boulevard enough?
Depends on how deep your clinical documentation needs to go. For standard medspa consent forms, intake, and photo tracking, a platform with named HIPAA features like Boulevard's Aesthetics tiers can cover it. If you need full clinical charting at an EMR level, plan on pairing that platform with dedicated EMR software rather than expecting one tool to do both.
Whatever you land on, don't let a clean pricing page decide this for you. Pull up the actual current plan pricing for whatever stack you're considering, check the BAA question in writing, and make sure your front desk and your treatment room aren't relying on two disconnected systems held together with copy-paste.