All 10 implementation artifacts. Built to work as an integrated program, not a stack of disconnected templates. All 10 artifacts individually total $1,830.

Includes: PHI Data Handling Addendum · Incident Decision Support · BAA Review Checklist · Clinical Use Case Risk Flags · OCR Audit Readiness Assessment · Risk Analysis Template · Breach Notification Letters · Annual Recertification Checklist (NPRM Edition) · Governance Calendar · Quarterly Review Pack

23-item self-assessment across 8 compliance domains. Identify your highest-priority gaps in about 15 minutes. Download. We’ll notify you when the final rule is published.

Ready-to-use notification packages for OCR, affected individuals, and media. Includes a breach chronology template, state notification supplement checklist, and breach log.

Six-domain annual compliance checklist updated with 13 new items drawn directly from the proposed NPRM — covering every HIPAA Security Rule standard across technical safeguards, incident response, and BA oversight. The proposed Security Rule amendments (90 Fed. Reg. 898, January 6, 2025) are not final and not enforceable. The Fall 2026 Unified Agenda moved the rulemaking to long-term actions with a July 2027 target. This maps to the current rule; the NPRM content is there so you are not rebuilding later.

Annual and quarterly cadence map for every Security Rule compliance obligation — structured as a working planning document with owner fields and completion tracking.

Structured quarterly review template for tracking open remediation items, new risk analysis triggers, access management updates, and BA status changes between annual compliance cycles.

Structured template for the annual HIPAA security risk analysis — built to proposed NPRM content requirements: asset inventory review, threat and vulnerability identification, documented risk ratings, and evaluation trigger log. The proposed Security Rule amendments (90 Fed. Reg. 898, January 6, 2025) are not final and not enforceable. The Fall 2026 Unified Agenda moved the rulemaking to long-term actions with a July 2027 target. This maps to the current rule; the NPRM content is there so you are not rebuilding later.

120-point assessment covering every HIPAA Security Rule standard — mapped to both the current rule and the proposed NPRM. Produces a readiness score, gap inventory, and prioritized remediation list. Includes Word and interactive HTML versions. The proposed Security Rule amendments (90 Fed. Reg. 898, January 6, 2025) are not final and not enforceable. The Fall 2026 Unified Agenda moved the rulemaking to long-term actions with a July 2027 target. This maps to the current rule; the NPRM content is there so you are not rebuilding later.

Risk flag checklist for evaluating clinical AI tools, digital health applications, and technology platforms that involve patient data or clinical decision-making. Includes Word and interactive HTML versions.

Clause-by-clause BAA review framework covering all required HIPAA provisions — plus proposed NPRM verification and contingency notification obligations. Flags gaps in legacy BAAs. Includes Word and interactive HTML versions. The proposed Security Rule amendments (90 Fed. Reg. 898, January 6, 2025) are not final and not enforceable. The Fall 2026 Unified Agenda moved the rulemaking to long-term actions with a July 2027 target. This maps to the current rule; the NPRM content is there so you are not rebuilding later.

Structured breach assessment worksheet walking privacy officers through the four-factor test under the Breach Notification Rule — produces a documented decision record. Includes Word and interactive HTML versions.

Standardized addendum for vendor agreements and internal policies wherever ePHI is involved. Covers handling obligations, access restrictions, incident notification, and data disposal.