Security risk analysis
The required assessment of risks to patient information.
Home / Startup & Growth / HIPAA Compliance
The HIPAA basics every practice needs, set up properly: risk assessment, policies, business associate agreements and staff training.
Small practices are subject to the same HIPAA Privacy and Security Rules as large health systems, and a security risk analysis is required.
We help you put the required documentation and safeguards in place in plain language, without enterprise-level complexity.
The required assessment of risks to patient information.
Privacy and security policies tailored to your practice.
BAAs with every vendor that handles patient information.
Annual HIPAA training with documented completion.
Your patient-facing privacy notice.
Email, texting, devices and access controls reviewed.
Price
$500
Half upfront, half when the work is complete. How payment works
New practices and established practices that have never done a formal risk analysis.
A 30-minute call maps your timeline, budget and the order of every step.
Entity, licenses, NPI, payer enrollment and compliance run in parallel.
EHR, billing, phones, scheduling and website are set up and tested.
You open with payers active, systems working and patients able to book.
HIPAA Compliance is available on its own, and it is also included in Practice Startup Assistance. See all packages on our pricing page.
Yes. The Security Rule requires covered entities of every size to conduct one.
Yes, with any vendor that creates, receives, maintains or transmits patient information for you.
No. We help with operational compliance. For legal questions we recommend a healthcare attorney.
Book a free 30-minute consultation. We'll review your practice and tell you where to start.