Free HIPAA readiness assessment
24 questions, scored report, prioritised gaps
Open →Resources
Tools, templates, guides, and redacted sample reports. Nothing here requires a call.
24 questions, scored report, prioritised gaps
Open →A single number you can take to leadership
Open →Software, services, and internal hours
Open →Likelihood × impact scoring you can defend
Open →Unique user identification, role definitions, provisioning and deprovisioning, emergency access, and the review cadence.
Download →A BAA containing every provision §164.504(e) requires, in two versions: covered entity to BA, and BA to subcontractor.
Download →The §164.308(a)(8) periodic evaluation as a run-book: what to re-test, what to re-document, and what to hand leadership.
Download →A role-based training deck plus the attendance and acknowledgement register that turns completion into evidence.
Download →Encryption standards at rest, in transit, and on removable media, with the addressable-specification rationale structure included.
Download →An incident response plan with the four-factor breach assessment worksheet, notification decision tree, and 60-day clock tracker built in.
Download →A bring-your-own-device policy covering enrolment, containerisation, remote wipe, and the consent language you need from staff.
Download →A password and authentication policy aligned to §164.312(d) and current NIST guidance, not 2003 complexity folklore.
Download →Physical and technical safeguards for a distributed workforce — the section most remote-first health tech companies leave blank.
Download →The full Security, Privacy, and Breach Notification policy set — 28 editable documents with the rule citation on every section.
Download →A working risk assessment workbook: asset inventory, threat/vulnerability pairing, scoring matrix, and a risk register that populates itself.
Download →