HIPAA · Healthcare IT
HIPAA-aligned IT, with a signed BAA and the paperwork to prove it
The HIPAA Security Rule expects you to protect patient data with access controls, encryption, backups and documented risk analysis. HeptaShield puts the technical controls in place and keeps the records, so you can show your work.
What we put in place
The technical safeguards, done and documented
Business Associate Agreement
Signed before we touch any system that holds patient data.
Access controls
Individual accounts, MFA everywhere, and access removed the day someone leaves.
Encryption
Encrypted laptops and workstations, and encrypted email for messages containing PHI.
Backups and records
Tested backups, risk analysis support and a record of every control in place.
Questions
Straight answers
- Does using you make us HIPAA compliant?
- Compliance belongs to your practice. We implement and document HIPAA-aligned technical safeguards so your compliance program has the evidence it needs.
- Will you sign a BAA?
- Yes, for every healthcare client, before we access any system that stores patient data.
- Do you help with the risk analysis?
- Yes. We supply the technical findings and documentation for your annual security risk analysis.
- What does it cost?
- Plans start at $79 per user per month with a $395 minimum monthly fee, and every price is published. The 12-month agreement can be cancelled in the first 90 days with 30 days' notice. The calculator on our pricing page shows your monthly price in about 30 seconds.
Find your HIPAA gaps before an auditor does
A free 30-minute review of your practice's IT and security, with a written assessment.
No pressure. If your setup is fine, we'll tell you.