Services/Capability

HIPAA Assessment

HIPAA Security Rule readiness for healthcare SaaS.

Delivered through
The right vCISO engagement
Engagement levels
Focused project · Ongoing ownership
What you get

Deliverables

HIPAA Security Rule gap assessment for SaaS companies handling Protected Health Information (PHI). Administrative, physical, and technical safeguards reviewed against your actual architecture, not a generic checklist. Business Associate Agreement template included.

  • Administrative, physical, and technical safeguard gap analysis
  • PHI data flow diagram and classification
  • Policy and procedure authoring for HIPAA compliance
  • Risk analysis document (required annually by HHS)
  • Business Associate Agreement template
  • Breach notification procedure and tabletop
Fit

Who this is for

Healthcare SaaS, telemedicine platforms, and any SaaS handling PHI on behalf of a Covered Entity.

Related capabilities

Not ready to talk? Score your SOC 2 readiness.

Twenty questions, a scored PDF in your inbox, a realistic timeline to audit. Free.

Start the scorecard

Ready when you are

Start with the essentials.

Share the essentials once. You'll receive a recommended starting scope, a working price range, and any focused questions needed to finalize it within 24 hours.