Administrative Safeguards
Guide and document the organizational work that keeps a HIPAA program moving.
- Risk analysis and risk management
- Policies, workforce training, and recurring activities
- Incident documentation and Business Associate workflows
SecurePracticeFor modern healthcare practices
HIPAA & Security
HIPAA guidance backed by secure workflows
HIPAA Assistant by SecurePractice helps small healthcare practices work through safeguard requirements, organize policies and supporting evidence, monitor readiness, and prepare audit materials in a secure platform.
Guided compliance, secure foundation
- Understand current safeguard status
- Follow practical guidance to take action
- Organize policies and supporting evidence
- Prepare the right materials for review
HIPAA Assistant supports the work. Your practice makes the decisions and explicitly marks applicable tasks complete after review.
HIPAA safeguards
Work through safeguards with context
HIPAA Assistant provides guided workflows for Administrative, Physical, and Technical Safeguard activities your practice is responsible for evaluating and carrying out.
Physical Safeguards
Work through the policies, procedures, and evidence behind protections in your facilities.
- Facility access controls
- Workstation safeguards
- Device and media controls with supporting records
Technical Safeguards
Evaluate and document how your practice protects electronic PHI in its own systems.
- Access control and unique user identification
- Audit and integrity controls
- Transmission security guidance and evidence
HIPAA Assistant guides, tracks, and helps document this work. It does not operate your facility, configure your devices, or implement every safeguard within your organization's environment.
Audit Wizard
Move from readiness assessment through audit follow-up
The Audit Wizard uses current organization information and records to focus audit preparation. Readiness indicators are working signals, not official scores, legal determinations, or guarantees of an audit outcome.
1
Assess Readiness
Review current checklist, policy, evidence, training, incident, BAA, and control signals to find areas that may need attention.
2
Prepare Audit Materials
Choose and generate the report or evidence package that matches the scope and period of a request.
3
Audit Day Assistant
Connect common auditor questions to relevant records, guidance, and helpful reports so your team can prepare factual responses.
4
Audit Follow-Up
Document requests, organize correspondence, review remediation work, and update audit materials after an audit.
Your compliance program
A guided workspace, with responsibilities kept clear
HIPAA Assistant brings ongoing work and supporting records together. Your organization remains responsible for implementing safeguards and making its own operational and legal decisions.
HIPAA Assistant helps your practice
- Understand current status through checklist and readiness indicators.
- Work through safeguard activities with Guided Help and explicit completion controls.
- Maintain policies, evidence, training, incidents, and Business Associate records.
- Review activity history and prepare materials for an internal review or audit.
Your practice remains responsible for
- Implementing safeguards across its workforce, facilities, devices, and systems.
- Evaluating which requirements apply and making operational or legal decisions.
- Keeping records accurate and marking tasks complete only after reviewing the work.
- Deciding when legal, privacy, security, or compliance advice is needed.
Policies and supporting evidence
Connect the requirement, the guidance, and the record
HIPAA Assistant keeps compliance work connected without treating file storage as compliance by itself.
Guided Help
Review why a requirement matters, practical completion steps, relevant product destinations, and examples of records an auditor may review.
Policy Library
Review and maintain policy documents, attachments, current status, and policy guidance in a workspace connected to compliance workflows.
Supporting evidence
Organize policies, BAAs, training records, incident documentation, and operational evidence for use in ongoing work and Audit Materials.
Uploading a file does not automatically complete a Checklist requirement. Your team explicitly marks applicable work complete after review, and records maintained outside HIPAA Assistant can remain valid.
Readiness and reporting
Build audit preparation from ongoing compliance work
Readiness is easier to review when checklist activity, policies, evidence, training, incidents, and Business Associate records are maintained throughout the year.
Compliance Timeline
Review a chronological history of checklist, document, training, incident, organization, team, and Audit Materials activity with actor and date context.
Compliance Activity Report
Export a time-based PDF or CSV record of compliance activity for internal review or an audit request.
Compliance Audit Packet
Generate a current-state PDF summary of key compliance status and supporting information.
Evidence Package
Package selected supporting records and generated audit materials in a structured ZIP.
Audit Readiness Report
Generate a readiness-oriented PDF based on current application data and a selected evidence period.
These outputs help organize and present relevant records for internal review or an audit. They do not certify compliance, replace professional judgment, or guarantee that a record set is complete.
Secure foundation
Security supports every workflow
SecurePractice protects information within the service while your practice manages its own safeguards and access decisions.
Encryption and cloud services
HIPAA Assistant runs on Google Cloud and Firebase managed services. TLS protects data in transit, and app data and file storage are encrypted at rest.
Authorization boundaries
Organization membership, roles, plan entitlements, Firebase Security Rules, and server-side authorization checks scope access to customer data and sensitive actions.
Activity logging
Key checklist, document, incident, team, and agreement events can be recorded with timestamps and user attribution for accountability and review.
Review additional operational safeguards and security documentation in the SecurePractice Trust Center.
Authentication and access
Protect access to sensitive compliance records
HIPAA Assistant combines account security with role-aware permissions. Your practice still decides who should have access and how workforce access is managed.
Email and password authentication
Individual accounts keep access associated with the person performing the work.
Premium MFA
Premium accounts require one enrolled method: authenticator-app TOTP or SMS multi-factor authentication.
Owner, Admin, and Member roles
Role and organization membership checks scope administrative, reporting, document, and compliance actions.
Inactivity protection
Inactivity warnings and automatic sign-out help limit stale sessions on shared or unattended devices.
Business Associate responsibilities
Separate responsibilities, clearly documented
SecurePractice's responsibilities for handling PHI through the service are distinct from your practice's responsibilities for its own vendors, workforce, systems, and safeguards.
SecurePractice and HIPAA Assistant
When Customer Data includes PHI, SecurePractice acts as a Business Associate under the applicable agreement and applies HIPAA safeguards when handling that information. Premium organization owners can review and accept the SecurePractice Business Associate Agreement in the app; acceptance is recorded and a confirmation PDF is saved.
Your practice and downstream vendors
Your practice identifies its Business Associates, determines when downstream BAAs are required, executes those agreements, and maintains the records. HIPAA Assistant provides guided workflows and a Vendors & BAAs workspace to organize determinations, agreements, and supporting evidence; it does not make the legal determination or execute agreements for you.
Put guidance, records, and audit preparation in one workflow
Start with the free checklist and add guided workflows, organized documentation, collaboration, and audit preparation when your practice needs them.