Founding pilot · 10 practices maximum
Finish the annual security risk analysis—then know what to fix first.
A guided readiness package for small outpatient practices that need a documented analysis, a usable risk register, and a concrete remediation plan—not another blank template.
Credited toward the $499 pilot package. No subscription.
The reservation is refundable until you submit the intake. Do not send patient information or other PHI.
Why this exists
A required analysis should produce an operating plan.
The HIPAA Security Rule requires an accurate and thorough assessment of risks to electronic protected health information. For eligible clinicians, the 2026 MIPS Promoting Interoperability measure also requires conducting or reviewing the analysis during the performance year. The pilot turns the practice’s own facts into an organized work product while keeping final validation with the practice.
Scope and honesty boundaries
- No patient names, records, screenshots, or other PHI are requested or accepted.
- The pilot is a guided readiness service, not legal advice, an audit opinion, or a compliance certification.
- The practice remains responsible for validating its answers, implementing safeguards, and obtaining legal or security advice when needed.