One purchase. No subscription surprises.
Pay once for 12 months of access and updates. We'll remind you before it ends, and renewing is up to you.
Policy kit
For practices that need written policies
$199one-time
- 16 editable policies, procedures and logs
- Practice name pre-filled in every document
- Guided security risk analysis worksheet
- Business associate agreement template
- 12 months of template updates
Complete bundle
Everything a small practice needs
$299one-timeSave $49
- The complete policy & procedure kit
- Staff training for up to 10 people
- Certificates and completion reports
- Template updates and yearly update module
- One purchase, one account
Staff training
For practices that need documented training
$149one-time
- Six video modules, about one hour total
- Quiz after every module
- Certificate for each staff member
- Manager dashboard and CSV completion report
- Up to 10 staff, 12 months of access
Every plan includes 12 months of access. Renew for $99/year if you want to, and we'll never charge you automatically.
What's in each plan.
| Policy kit | Complete bundle | Staff training | |
|---|---|---|---|
| Editable policies, procedures and logs | ✓ | ✓ | · |
| Guided security risk analysis | ✓ | ✓ | · |
| Business associate agreement template | ✓ | ✓ | · |
| Six training modules with quizzes | · | ✓ | ✓ |
| Certificate per staff member (up to 10) | · | ✓ | ✓ |
| Manager dashboard and completion report | · | ✓ | ✓ |
| 12 months of updates | ✓ | ✓ | ✓ |
| Price | $199 | $299 | $149 |
Sixteen documents, one afternoon.
Read me first
How to adopt the kit in an afternoon, and what to do every year.
Privacy and Security Officer Designation
Names who is responsible, and sets the six-year documentation rule.
Privacy Policy: Uses and Disclosures
When phi can be used or shared, minimum necessary, and verification.
Patient Rights Procedures
Step-by-step handling of access, amendment, accounting, restriction and communication requests.
Notice of Privacy Practices
The patient-facing notice, with every required section.
Security Policy
The administrative, physical and technical safeguards your practice uses.
Security Risk Analysis
A guided worksheet to find and rate the risks to your patient data.
Risk Management Plan
Turns your risk analysis into a dated action list with owners.
Access Control, Passwords and MFA
Accounts, passwords, mfa, and same-day onboarding and offboarding checklists.
Workstation, Device and Mobile Use
Screens, encryption, personal phones, texting rules, and secure disposal.
Remote Work
Home network, device and workspace rules for staff working off-site.
Incident Response and Breach Notification
Reporting, containment, the four-factor breach assessment, and notification deadlines.
Contingency, Backup and Disaster Recovery
Backups ransomware can't reach, restore testing, and running the practice during an outage.
Workforce Training and Sanctions
Who gets trained and when, how it's recorded, and consistent discipline for violations.
Business Associate Management
Which vendors need a baa, plus a tracking inventory.
Business Associate Agreement
A baa template for vendors that don't provide their own.
Six modules, about an hour.
HIPAA basics
What counts as PHI, the Privacy Rule vs. the Security Rule, and the "minimum necessary" rule.
Front desk and patient rights
Verifying identity, phones and voicemail, sign-in sheets, and handling patient record requests.
Phishing and scams
Real-world fake emails, texts and calls aimed at clinics, and the three-step habit that stops them.
Devices and passwords
Strong passphrases, MFA, screen locks, personal phones, and why you never text PHI.
Ransomware and remote work
What a ransomware attack looks like at a clinic, what to do in the first minute, and working safely from home.
Spotting and reporting incidents
What counts as an incident or a breach, who to tell, and why reporting fast matters.
About buying.
Is it a subscription?
No. You pay once for 12 months of access and updates. We email you before it ends, and renewal ($99) is optional and never charged automatically.
Can we add more than 10 staff?
Each training purchase covers up to 10 people. If you need more seats, contact us and we'll set it up.
Do we keep the templates after 12 months?
Yes. Anything you've downloaded is yours to keep using for your practice. Renewing gets you the current version as rules change.
What if we need help filling them in?
Use the help form and we'll connect you with an IT partner who works with medical practices.