How it works
Evidence first. Then judgment.
Our engine does the collecting, correlating and drafting. A named security officer does the thinking and signs the result. You get a short monthly sign-off instead of a second job.
Week 1
Gap analysis
You send the policies you have. We return a ranked list of gaps against the HIPAA Security Rule, in plain English.
Month 1
Connect and first review
Read-only connections to your email and identity provider, EHR and cloud tools, plus a small agent on company computers. A scan from one device at each location finds the equipment nobody wrote down. Your first monthly review and your first prioritized issue list land this month.
Months 2–3
Full inventory and baseline
A complete, live inventory of people, accounts, devices, systems and vendors, and a baseline to measure every later month against.
Every month
Review and sign
Our engine drafts access, device, vendor, log and policy reviews from the latest evidence. A named security officer signs off. Fixed issues close themselves; regressions reopen.
Every year
Risk analysis
A documented risk analysis built from twelve months of evidence, plus the policy updates it calls for.
The engine
Why it costs less than a security hire
Continuous evidence
Evidence is collected on a schedule and stored in a tamper-resistant locker for six years — the HIPAA documentation retention period.
Drafted, not dumped
Correlating an HR roster with account lists is a job for computers. Deciding what matters is a job for a person. We split it that way.
One issue list
Every finding — from reviews, scans, vendors or policies — lands in one prioritized list you can see in your client portal.
Security testing
Testing sized for small organizations.
Vulnerability assessments and scoped penetration testing, available à la carte or alongside the security officer program. Findings go straight onto your issue list and get tracked to closure.
Start with what you already have.
Send us your current policies and get a free gap analysis — or grab 30 minutes with Griffin to talk through where you stand.