A readiness assessment across 8 domains, a controls matrix for the Security, Privacy & Breach rules, a §164.308 risk-analysis template, a BAA guide, policies, and a phased compliance roadmap. Everything a covered entity or business associate needs to become — and stay — audit-ready.
Score your readiness across 8 domains, perform your risk analysis, track every control to evidence, and work the roadmap. Instant download — no subscription.
For teams beginning their HIPAA journey and needing a structured read.
For teams actively driving toward HIPAA compliance.
For the full compliance program, end to end.
Redirecting to secure checkout…
The free HIPAA readiness assessment scores you across eight domains and shows your gaps and high-risk exposures. The toolkit is how you close them — and the controls tracker turns it into your evidence trail for the Security, Privacy, and Breach rules.
No — HHS does not certify HIPAA compliance, and any vendor claiming to "certify" you is overstating it. This toolkit demonstrates compliance with the Security, Privacy, and Breach Notification Rules through documented controls and evidence.
It gets you there and keeps you there — the risk analysis, controls, policies, and evidence. HIPAA compliance is an ongoing program, not a one-time box to tick, and the toolkit is built for that.
Covered entities (providers, plans, clearinghouses) and their business associates — any organization that creates, receives, maintains, or transmits protected health information (PHI).
The §164.308(a)(1) security risk analysis — it is the most-cited failing in enforcement actions. The toolkit includes a risk-analysis template built around it.
Yes — you need a BAA with any vendor that handles PHI on your behalf. The toolkit includes a BAA guide so you get the contracts right.
Yes. Our team can run the risk analysis, remediate gaps, and stand up your HIPAA program. Start with the free assessment or book a consultation.
If you'd rather we perform the §164.308 risk analysis, remediate the gaps, and stand up your HIPAA program, that's what our vCISO engagements are for. Tell us where you are and we'll recommend the right scope.