Find the gaps before someone else asks about them.
Free tools - start here with a diagnostic assessment. Find the gaps. Then fix them with the toolkit.
Assessments across healthcare, AI governance, privacy, education, and legal operations. Free to take. Your score and biggest gap appear immediately.
The same exchange every time
Score, readiness level, and highest-priority gap appear on screen at no cost.
No email required to see your score
Full report unlocked with an email
Marketing consent is separate and optional
HIPAA Compliance Self-Assessment
Thirty-six questions across six domains. Get a scored readiness level, your weakest domain, and a gap summary. Scores you against the current Security Rule, with proposed 2026 changes flagged separately.
Useful forCovered entities and business associates preparing for an OCR inquiry, audit, or internal compliance review.AI Governance
Twenty-five questions across the core pillars of an AI governance program. Get a maturity score and the gaps that matter most.
Useful forOrganizations deploying AI tools without a formal governance program, or teams preparing for a board-level AI question. Start →CCPA / GDPR gap
Fifteen questions scored simultaneously against CCPA/CPRA and the EU GDPR. See where one control covers both and which gaps are urgent.
Useful forOrganizations with California consumer data and EU operations. Start →K-12 District AI Readiness
A diagnostic across student-data privacy, vendor vetting, classroom use, and policy. Get a maturity score and the gaps that matter most.
Useful forK-12 district leaders adopting AI tools and needing a defensible governance posture. Start →Higher-Ed FERPA / GLBA
A dual-framework diagnostic scored against FERPA student-records requirements and the GLBA Safeguards Rule for financial-aid data. See where controls overlap and where gaps are urgent.
Useful forColleges and universities managing student education records and financial-aid systems. Start →Court Clerk Readiness
A focused diagnostic across records access, redaction, and local AI-use policy for California court clerk operations. Get a scored readiness level and a gap summary.
Useful forCourt clerk offices managing sensitive case records and balancing public-records duties with privacy requirements. Start →Solo Practitioner AI Ethics
A focused diagnostic across the ethics duties a solo or small firm faces when using AI: confidentiality, competence, verification, and client communication.
Useful forSolo attorneys and small firms adopting AI tools without dedicated IT or compliance support. Start →Incident Severity Calculator
Answer a few questions about an active or potential incident. Get an immediate severity classification, a response timeline, and the program gaps the incident is exposing.
Useful forPrivacy officers, legal teams, and IT security leads. Also works to stress-test a response framework before you need it. Start →Ready to Connect?
What are you working on? Complete the form with a few details about your project. We'll review your message and get back to you within two business days.
Frequently Asked Questions
Still have questions? Take a look at the FAQ or reach out anytime.
-
Helps organizations build operational infrastructure to deploy AI responsibly — intake workflows, risk tiering, approval processes, vendor oversight, documentation standards.
-
JHarris Advisory HIPAA engagements are fixed-scope and typically run 3-6 weeks.
-
Yes — especially in regulated industries. The exposure from an undocumented AI deployment is not proportional to headcount. Regulators focus on whether governance exists.
-
A consultant builds programs. A lawyer gives legal advice. JHarris Advisory is both — operational delivery with a built-in Counsel Review Gate.
-
Healthcare, K-12 and higher education, law firms and court systems, and data-driven businesses in regulated industries.
-
Evaluates current controls against HIPAA Privacy, Security, and Breach Notification Rules. JHarris Advisory offers a free 30-question version with a scored readiness level.
-
Boutique practice — you work directly with Jeremy Harris. Engagements are fixed-scope, operationally focused, and priced for mid-market organizations.