Now accepting founding practices — limited spots

Get your practice
hipafied in
30 minutes.

Hipafy does the heavy lifting on your HIPAA compliance documentation — risk assessments, privacy policies, BAAs, and training records, all tailored to your practice. Built so you can focus on patients, not paperwork.

Join the waitlist → See how it works
SC
MR
JP
AL
Now onboarding founding practices — therapists, dentists & chiropractors
The numbers you need to know
$50K
Minimum HIPAA fine per violation
for "willful neglect"
Up to $1.9M per violation category, per year
83%
Small practices missing at least
one required HIPAA document
Source: HIPAA Journal industry survey
$249
Hipafy per month (annual) vs. $5,000+
for a compliance consultant
7-day free preview. No setup fees.
Federal HIPAA audits are active — is your practice ready?
Works with SimplePractice TherapyNotes Jane App Athenahealth Kareo Doxy.me
The real problem

You became a clinician to heal people, not navigate federal law.

HIPAA requires dozens of documents, annual reviews, signed vendor agreements, staff training records, and documented incident response plans. Most small practices have none of this — and don't know where to start.

One audit. One breach. One patient complaint. That's all it takes for a fine that could close your practice.

HHS OCR launched Phase 3 audit sweeps in March 2025, now actively targeting small practices. Being non-compliant is no longer a theoretical risk.
No risk assessment on file
The annual Security Risk Assessment is the #1 cited missing document in HIPAA enforcement actions — required every single year.
Missing Business Associate Agreements
Your EHR, billing software, scheduler, and payment processor all need a signed BAA. Most practices are missing several.
Telehealth on consumer tools
Regular Zoom, FaceTime, or Skype are not HIPAA-compliant. Hundreds of thousands of practices are unknowingly exposed.
No staff training documentation
Annual HIPAA training is required for all staff — and having done it isn't enough. You need documented proof.
How it works

Get hipafied in three steps

From zero documentation to a complete, audit-ready compliance package — in under 30 minutes.

1

Answer 9 questions

Tell us about your practice — your software, staff size, how you communicate with patients. Plain language, no legal jargon.

2

Get your document package

Hipafy generates your HIPAA compliance documents based on your answers — tailored to your practice, vendors, and state. Ready to review, sign, and file.

3

Stay current automatically

Annual reminders, regulation updates, BAA expiry alerts, and ongoing monitoring — handled so you never fall behind.

Security Risk Assessment45 CFR §164.308
Notice of Privacy Practices45 CFR §164.520
Business Associate Agreements45 CFR §164.308(b)
Incident Response Plan45 CFR §164.308(a)(6)
Staff Training Records45 CFR §164.530(b)
Patient Rights Procedures45 CFR §164.524
Website Privacy PolicyGeneral requirement
Sanctions & Workforce Policy45 CFR §164.530(e)
What you get

The documents your practice
needs to have in order

Not generic templates. Documents generated from your actual answers, with your practice name, your vendors, your staff count. Review them, sign them, file them. Hipafy handles the generation — you remain responsible for your compliance program.

✦
Auto-populated, not templates
Every document is generated from your questionnaire answers — ready to sign, not ready to fill in.
✦
Annual auto-renewal
Risk assessments expire yearly. We remind you, update your documents, and keep your practice current automatically.
✦
Printable and PDF-ready
Every document is formatted for signing, filing, and presenting to an auditor — no reformatting needed.
Free compliance assessment

Find out where your practice stands

Takes 5 minutes. No credit card. See your gaps instantly.

Hipafy — Free Assessment

HIPAA Gap Analysis

Answer honestly — we're here to help, not judge.

0 of 9 questions complete
Simple pricing

Way cheaper than a fine

Pay annually and save 2 months. 7-day free preview on all plans — see the platform before you commit.

Annual
Monthly
Save 17%
Solo practice
$166
/ month · billed $1,990/year · 1–2 providers
  • ✓Full document package (8 docs)
  • ✓Annual risk assessment
  • ✓Annual renewal reminders and review alerts
  • ✓Notice of Privacy Practices
  • ✓Email support
Join the waitlist
Most Popular
Small practice
$249
/ month · billed $2,990/year · up to 10 staff
  • ✓Everything in Solo
  • ✓Unlimited renewal reminders and review alerts
  • ✓Staff training tracker
  • ✓Incident response workflow
  • ✓Telehealth compliance review
  • ✓Priority support
Join the waitlist
Group practice
$415
/ month · billed $4,990/year · 11–50 staff
  • ✓Everything in Small Practice
  • ✓Multi-location document sets
  • ✓Quarterly compliance review call
  • ✓Custom policy templates
  • ✓Priority email support
Join the waitlist
7-day free preview on all plans. Explore the platform, run your assessment, and see your documents before you commit. If it is not right for your practice, cancel within 7 days and pay nothing.
Questions & answers

Everything you need to know

Do I really need HIPAA compliance as a solo therapist?
Yes. Any provider who creates, stores, or transmits Protected Health Information (PHI) — which includes almost every therapist, dentist, or chiropractor — is a "covered entity" under HIPAA, regardless of practice size.
How is Hipafy different from using a compliance consultant?
A consultant charges $3,000–$8,000 per engagement and produces static documents. Hipafy generates living documents that update automatically, tracks your BAAs and training, and alerts you when action is needed — all for $199–$499/month.
Are the documents legally valid?
Our documents are drafted to meet the exact requirements of the HIPAA Privacy Rule (45 CFR Part 164) and Security Rule, reviewed by licensed healthcare compliance attorneys. Hipafy is software, not a law firm — we recommend professional review for complex situations.
What happens if regulations change?
We monitor HHS and OCR guidance continuously. When regulations change — like the 2025 Security Rule update — we update your documents automatically and notify you of any actions required. No extra charge.
Do you integrate with SimplePractice or TherapyNotes?
We support all major EHRs including SimplePractice, TherapyNotes, Jane App, and Athenahealth for BAA tracking and vendor identification. Direct integrations and a BAA tracking dashboard are on our Q3 2026 roadmap.
Can I cancel at any time?
Yes — no contracts, no cancellation fees. You keep access to your documents until the end of your billing period. We recommend downloading your compliance package before cancelling.
Staff Training — Included in All Plans

HIPAA training your staff will
actually complete

Short, practical, built for busy clinicians. Five focused modules, a 10-question knowledge check, and a dated certificate that satisfies 45 CFR §164.530(b). Official HHS sources linked throughout.

Hipafy Training Module — 2026
5 modules ~28 min
01
HIPAA Foundations
What it is, who it applies to, real enforcement examples
~5 min
Preview
From this module

HIPAA applies to every provider who transmits health information electronically — regardless of practice size. A solo therapist with one patient is held to the exact same standard as a hospital system. The fines are real: $50,000 per violation for wilful neglect, up to $1.9M per category per year.

Source: HHS OCR · 45 CFR §§160, 164
02
Protected Health Information & Patient Rights
The 18 PHI identifiers, minimum necessary standard, patient access rights
~5 min
Members only
03
Your Daily Responsibilities
Permitted disclosures, real-world scenarios, Notice of Privacy Practices
~8 min
Members only
04
Technology & Security
Email compliance, device security, passwords, remote work rules
~7 min
Members only
05
Breach Recognition & Response
Four-step response procedure, HHS notification timelines, documentation
~5 min
Members only
10-Q Quiz 80% to pass Unlimited retakes
Completion certificate issued on pass
HIPAA Training Certificate
hipafy.com
Certificate of Completion
HIPAA Workforce Training
This certifies that
Your Name Here
Your Practice
01 Foundations
02 PHI & Rights
03 Daily Work
04 Technology
05 Breach Response
Date
May 2026
Score
90%
Valid
May 2027
Verified
45 CFR §164.530(b) compliant · Dated · Audit-ready
Members only
Complete all 5 modules and pass the quiz to receive your dated, audit-ready certificate
Written at practitioner level
No legal jargon. Every module is written for busy clinicians — what it means, what you must do, and why it matters for your practice.
Dated certificate issued on completion
Your certificate includes the date, your score, and all 5 module names. Exactly what 45 CFR §164.530(b) requires you to retain on file.
One certificate per staff member
Every person on your team completes training individually and receives their own certificate. One audit question answered for every employee.
Join the waitlist to get access →

Included in all founding practice plans · No extra charge