HIPAA policies & guidelines
Practical guides for small health and wellness practices, based on the HHS Privacy Rule, Security Rule and Breach Notification Rule.
Not legal advice. This is general information for small practices, summarized from HHS.gov. Talk to a healthcare attorney or qualified compliance professional about your specific situation.
Guides
- HIPAA Basics Checklist for Small Wellness Practices (2026)
- BAAs Explained: Which Common Practice Vendors Sign Them (2026)
- HIPAA-Safe Marketing: Reviews, Testimonials, Social, Texting and Email
- Best HIPAA Compliance Software, Training and Consultants for Small Practices (2026)
Software & training
Provisional: this is an initial research list built from vendor websites (checked October 15, 2026). We have not tested these products hands-on, and we do not publish a numeric score until we have verified pricing and specs against the rubric. Anything we could not verify says “not verified yet”. Ask vendors for written quotes and specs.
Compliancy Group (The Guard)
Compliance platform covering HIPAA, OSHA and more.
- Pricing
- Foundation $99/mo + $8/employee/mo; Growth $249/mo + $10/employee/mo (adds risk assessment, vendor/BAA management, exclusion screening); higher tier available. Billed annually.
- Reviews
- Unknown (not verified)
- Rating
- Provisional, not scored yet
Accountable
Self-serve HIPAA compliance platform.
- Pricing
- Basic HIPAA $199/mo monthly or $169/mo annual (15 employees incl.); Plus $299/$254; Pro $799/$679 (20 employees). 7-day free trial; monthly plans cancel anytime.
- Reviews
- Unknown (not verified)
- Rating
- Provisional, not scored yet
HIPAA One (Intraprise Health)
Risk assessment and compliance software.
- Pricing
- Not published (quote).
- Reviews
- Unknown (not verified)
- Rating
- Provisional, not scored yet
Medcurity (Small Practice SRA)
Security Risk Analysis tool with policy templates and specialist help.
- Pricing
- $499/yr for practices up to 20 FTEs.
- Reviews
- Unknown (not verified)
- Rating
- Provisional, not scored yet
HIPAA Exams
Online HIPAA training courses (IACET-accredited, per the vendor).
- Pricing
- $28.99/user for HIPAA for Healthcare Workers or Medical Office Staff; group pricing available.
- Reviews
- Course pages show 4.5 and 4.6 average ratings (vendor-hosted reviews)
- Rating
- Provisional, not scored yet
Services & consulting (agencies & services rubric)
Provisional: this is an initial research list built from vendor websites (checked October 15, 2026). We have not tested these products hands-on, and we do not publish a numeric score until we have verified pricing and specs against the rubric. Anything we could not verify says “not verified yet”. Ask vendors for written quotes and specs.
Total HIPAA Compliance (HIPAA Prime)
Done-with-you subscription: training, risk assessment, customized policies and BAA templates, dedicated project manager.
- Pricing
- From $482.25/mo (vendor shop page); onboarding fee not verified.
- Reviews
- Unknown (not verified)
- Rating
- Provisional, not scored yet
North Privacy Advisors
Consultant for small practices: written risk analysis, policies, fractional privacy officer.
- Pricing
- $750 privacy exposure review; risk analysis $3,500–$4,500 flat; fractional privacy officer $2,500–$5,000/mo.
- Reviews
- Unknown (not verified)
- Rating
- Provisional, not scored yet
SuperHIPAA (Virtual HIPAA Officer)
Outsourced named privacy/security officer on retainer.
- Pricing
- From $2,500/mo.
- Reviews
- Unknown (not verified)
- Rating
- Provisional, not scored yet
Healthcare MSPs
- Healthcare-focused MSPs (managed IT): we have not verified any specific MSP yet. Pricing is usually quote-based per user or device.
- Ask any MSP: Will you sign a BAA? Do you perform or support the annual security risk analysis? What is your backup, encryption and incident-response process? Who owns the documentation?
- An MSP handles IT security; it does not replace policies, training and a designated privacy officer.