Healthcare practices

Be ready when HIPAA regulators ask for your risk analysis.

For medical, dental, therapy and aesthetic practices. We secure every device that touches patient data and keep the records that show it.

What the rules expect

What you're expected to show

01A current, accurate risk analysis, and a plan that acts on it

02Access removed when staff leave

03Documented disposal of devices that held patient data

04Agreements with vendors that handle patient data

What we do

What's expected

What we do

A current, accurate risk analysis, and a plan that acts on it

We run the technical review, keep it current and track every fix to completion.

Access removed when staff leave

Accounts and devices closed out the same day.

Documented disposal of devices that held patient data

Devices wiped and logged when they come back.

Agreements with vendors that handle patient data

We keep a vendor list with every agreement and renewal date.

We sign a business associate agreement before we see any patient data.

We run the technical controls and keep the records. We do not provide legal advice or certify compliance.

The numbers

federal HIPAA investigations closed under an initiative focused on the risk analysis.

federal ransomware investigations completed under HIPAA.

A fixed-fee review with a written report and plan. You keep both, whatever you decide next.