Services
Start with a one-time service, then keep everything current with a monthly retainer.
Gap assessments start at $2,500. Monthly retainers start at $350 a month.
Your exact quote comes after your free consultation.
One-time services
For practices getting compliant for the first time, or fixing specific gaps.
HIPAA gap assessment
Ask about this service: HIPAA gap assessment
A full review of how your practice measures up to the HIPAA Privacy, Security and Breach Notification Rules. You get a written report of findings, each rated by risk, with recommendations in order of priority.
Full compliance package
Most completeAsk about this service: Full compliance package
Gap assessment, policies and procedures, business associate agreement coordination and virtual staff training. Our complete solution for practices starting from zero.
Costs less than booking each service separately.
Policies and procedures
For existing clientsAsk about this service: Policies and procedures
We write or fully revise your HIPAA policy and procedure manual, customized to the way your practice actually works.
Staff training session
Ask about this service: Staff training session
A virtual HIPAA training session for your whole team, with customized materials and signed attendance records for your compliance file.
Business associate agreement coordination
Ask about this service: Business associate agreement coordination
We review, explain and execute business associate agreements (BAAs) with your vendors, and keep a log of every signed agreement.
Practices with more than one location or 15 or more staff receive a custom quote.
Not sure which one fits your practice?
Request a free consultationKnow exactly where your practice stands.
Every gap assessment ends with a written report for your practice: what’s in place, what’s missing and what to fix first, with each finding rated by risk.
See how an assessment worksGap assessment report
Prepared for Sample Family Dental
Compliance today
58%
Findings, rated by risk
- High risk:No security risk assessment on file
- High risk:Two vendors with no business associate agreement
- Medium risk:Staff training records incomplete
- Medium risk:No written breach response plan
- Low risk:Notice of Privacy Practices out of date
Next: a prioritized action roadmap, starting with the high-risk items.
How an assessment works
Three phases over 3 to 4 weeks. Your part is making staff available for short interviews and sharing the documents on our checklist.
- Short interviews with your staff
- Review of your policies and procedures
- Walkthrough of your office
- Review of your vendors and their business associate agreements
- Review of your computers, network and software
- Compare what we found with what HIPAA requires
- Rate each gap by risk level
- Calculate your compliance percentage
- Identify the areas to fix first
- Formal written gap report
- Findings rated by risk
- Prioritized action roadmap
- Feedback meeting to walk you through it
Your written report arrives within 5 business days of our on-site review, and we go through it together in a feedback meeting.
Monthly retainers
HIPAA compliance isn’t a one-time project. Staff change, vendors change and the rules change. A retainer keeps your records current.
Basic retainer
3-month minimum
Ask about this retainer: Basic retainerIncludes:
- Monthly HIPAA compliance status report
- Quarterly policy check-in
- New hire training coordination
- Review of vendor agreements (BAAs) before you sign any new software or service contract
- Alerts when HIPAA regulations change
- Email support with a reply within 48 hours
Standard retainer
3-month minimum
Ask about this retainer: Standard retainerEverything in Basic, plus:
- Incident response support
- Documentation updates after an incident or audit
- Monthly 30-minute check-in call
- Priority email support with a reply within 24 hours
- Annual full policy review and update
- Retainer clients get 10% off any additional one-time service.
- Basic clients can add incident response support, billed by the hour.
Want to talk through which retainer suits you?
Request a free consultationAfter the assessment, it all lives in one place.
Clients get an online compliance portal. Your staff complete their training and sign policies there, and you can see where your practice stands at any time.
Compliance portal
- Overview
- Training
- Policies
- Vendors and BAAs
- Risk assessment
- Incidents
Sample Family Dental
Overview
- Staff training
- 12 of 142 due this month
- Policies signed
- 24 of 262 waiting for signatures
- Vendor agreements
- 9 of 101 agreement missing
- Risk assessment
- DoneNext one due March 2027
This month
- Send a business associate agreement to the new billing vendorTo do
- Two staff members to finish annual HIPAA trainingReminder sent
- Quarterly policy check-in with AmanoraNov 12
What we’ll ask you to gather
Before the assessment, we’ll ask for these documents. Don’t worry if some are missing: finding what’s missing is part of the assessment.
- Your current HIPAA policies and procedures
- Notice of Privacy Practices
- A list of the software vendors you use
- Signed business associate agreements
- Staff training records and completion dates
- Your most recent security risk assessment, if any
- A basic description or diagram of your IT setup
- A list of devices that access patient data
- Who has access to which systems
- Your incident or breach log, if any
- A list of staff who handle patient information
- Any previous audit or compliance reports
Find out where your practice stands.
Request a free 30-minute consultation. We’ll talk through how your practice handles patient information, answer your questions and suggest where to start.
Request a free consultation