Industries · Medical & dental
The IT side of HIPAA, handled and documented.
The Security Rule’s technical safeguards, in place and written down, with systems that keep the schedule moving.
HIPAA Security Rule · 45 CFR 164.312
What’s different here
When the system is down, the waiting room fills up.
Practices run on a schedule, imaging and records that all depend on the network, and on patient data the law requires you to protect.
The schedule is the business
Imaging and devices
Patient data everywhere
Guests and patients on Wi‑Fi
The obligation
Five technical safeguards, and a record that they’re in place.
The HIPAA Security Rule’s technical safeguards, at 45 CFR 164.312, cover five areas: access control, audit controls, integrity, person or entity authentication and transmission security. The rule also requires a risk analysis, and it expects the safeguards to be documented.
We put the technical side in place and keep the records: unique logins, automatic logoff, encryption on devices and in transit, audit logging, multi-factor authentication, and backups that are restore-tested. You get the evidence for your risk analysis and your policies.
Sources: 45 CFR 164.312, Technical safeguards; HHS, The Security Rule.
We support your compliance program with the controls and the evidence. We don’t certify compliance, and we’re not your attorney.
The calendar
Built around the working day.
Maintenance happens when the chairs are empty, and the evidence builds up every month.
Onboarding
Safeguards mapped
Each technical safeguard mapped to a control and a record.
After hours
Maintenance
Patches and changes in windows agreed with you, outside clinic hours.
Every month
Evidence
Restore tests, patch compliance and access changes, in the report.
Every year
Risk analysis support
The technical inputs to your annual review, ready.
What we set up
Built into the Secured plan, and documented.
Every item below is part of Secured, with the evidence kept for whoever asks.
- Unique logins for everyone, with automatic logoff on shared workstations.
- Encryption on laptops, phones and backups, and for data in transit.
- Audit logging on systems that hold patient data.
- Multi-factor authentication on email and remote access.
- A separate network for guests and patients.
- Backups restore-tested monthly, with the file, the time and who opened it.
- Offboarding within four business hours.
- A monthly report that feeds your risk analysis.
A price example
A 12-person office on Secured: from $2,100 a month.
12 people × $175, the published floor. Month to month, unlimited remote support, and everything on this page included. Your number comes from a 20-minute review and holds after you sign.
Monthly floor, Secured
12 people× $175
$2,100 / month
Month to month. $750 monthly minimum. About 10% less with a twelve-month commitment.
Check it yourself first
Two free checks, no email required.
Questions
Straight answers.
Will you sign a business associate agreement?
Can you work with our practice software and imaging vendors?
Do you do the HIPAA risk analysis?
When do you do maintenance?
Get started
Talk to an engineer, not a salesperson.
1‑855‑OPSWORQ855‑677‑9677 · Mon–Fri, 8am–5pm ET
If the business has stopped, call. Don’t use the form.
Pick a time for a 20-minute review of what you run, or write to us and a person replies within one business day. Then a written quote with a start date on it.