Now accepting founding practices — limited spots

Get your practice
hipafied in
30 minutes.

Hipafy generates your HIPAA compliance documentation — risk assessment, privacy policy, BAAs, and training records — tailored to your practice. A tool that does the heavy lifting. Your compliance remains your responsibility.

Join the waitlist → See how it works
SC
MR
JP
AL
Trusted by 200+ therapists, dentists & chiropractors
The numbers you need to know
$50K
Minimum HIPAA fine per violation
for "willful neglect"
Up to $1.9M per violation category, per year
83%
Small practices missing at least
one required HIPAA document
Source: HIPAA Journal industry survey
$249
Hipafy per month (annual) vs. $5,000+
for a compliance consultant
30-day money-back guarantee. No setup fees.
✓  OCR Phase 3 audits — active now
Works with SimplePractice TherapyNotes Jane App Athenahealth Kareo Doxy.me
The real problem

You became a clinician to heal people, not navigate federal law.

HIPAA requires dozens of documents, annual reviews, signed vendor agreements, staff training records, and documented incident response plans. Most small practices have none of this — and don't know where to start.

One audit. One breach. One patient complaint. That's all it takes for a fine that could close your practice.

⚠️
HHS OCR launched Phase 3 audit sweeps in March 2025, now actively targeting small practices. Being non-compliant is no longer a theoretical risk.
📋
No risk assessment on file
The annual Security Risk Assessment is the #1 cited missing document in HIPAA enforcement actions — required every single year.
📄
Missing Business Associate Agreements
Your EHR, billing software, scheduler, and payment processor all need a signed BAA. Most practices are missing several.
💻
Telehealth on consumer tools
Regular Zoom, FaceTime, or Skype are not HIPAA-compliant. Hundreds of thousands of practices are unknowingly exposed.
🎓
No staff training documentation
Annual HIPAA training is required for all staff — and having done it isn't enough. You need documented proof.
How it works

Get hipafied in three steps

From zero documentation to a complete, audit-ready compliance package — in under 30 minutes.

1

Answer 9 questions

Tell us about your practice — your software, staff size, how you communicate with patients. Plain language, no legal jargon.

2

Get your document package

Hipafy generates your HIPAA compliance documents based on your answers — tailored to your practice, vendors, and state. Ready to review, sign, and file.

3

Stay current automatically

Annual reminders, regulation updates, BAA expiry alerts, and ongoing monitoring — handled so you never fall behind.

Security Risk Assessment→
Notice of Privacy Practices→
Business Associate Agreements→
Incident Response Plan→
Staff Training Records→
Patient Rights Procedures→
Website Privacy Policy→
Sanctions & Workforce Policy→
What you get

The documents your practice
needs to have in order

Not generic templates. Documents generated from your actual answers, with your practice name, your vendors, your staff count. Review them, sign them, file them. Hipafy handles the generation — you remain responsible for your compliance program.

✦
Auto-populated, not templates
Every document is generated from your questionnaire answers — ready to sign, not ready to fill in.
✦
Annual auto-renewal
Risk assessments expire yearly. We remind you, update your documents, and keep your practice current automatically.
✦
BAA tracking dashboard
Every vendor, every signature status, every expiry date — in one place, always up to date.
Free compliance assessment

Find out where your practice stands

Takes 5 minutes. No credit card. See your gaps instantly.

Hipafy — Free Assessment

HIPAA Gap Analysis

Answer honestly — we're here to help, not judge.

0 of 9 questions complete
What practices say

Trusted by clinicians, not compliance officers

★★★★★
"I'd been putting off HIPAA compliance for three years. Every solution I found was either $10,000 a year or impossible to understand. Hipafy got me compliant in an afternoon."
SC
Dr. Sarah Chen, LCSW
Solo therapy practice · San Francisco, CA
★★★★★
"My EHR vendor emailed about updating our BAA and I had no idea what they meant. Hipafy explained everything and handled all the paperwork. Worth every penny."
MR
Dr. Marcus Rivera, DDS
Family dental practice · Austin, TX
★★★★★
"We had a patient complaint that triggered a compliance review. Because we'd been using Hipafy, we had every document ready within an hour. The reviewer was genuinely impressed."
JP
Dr. Janet Park, DC
Chiropractic clinic · Chicago, IL
Simple pricing

Way cheaper than a fine

Pay annually and save 2 months. 30-day money-back guarantee on all plans.

Annual
Monthly
Save 17%
Solo practice
$166
/ month · billed $1,990/year · 1–2 providers
  • ✓Full document package (8 docs)
  • ✓Annual risk assessment
  • ✓BAA tracking (up to 10 vendors)
  • ✓Notice of Privacy Practices
  • ✓Email support
Join the waitlist
Most Popular
Small practice
$249
/ month · billed $2,990/year · up to 10 staff
  • ✓Everything in Solo
  • ✓Unlimited BAA tracking
  • ✓Staff training tracker
  • ✓Incident response workflow
  • ✓Telehealth compliance review
  • ✓Priority support
Join the waitlist
Group practice
$415
/ month · billed $4,990/year · 11–50 staff
  • ✓Everything in Small Practice
  • ✓Multi-location support
  • ✓Role-based access audit
  • ✓Custom policy templates
  • ✓Dedicated account manager
Join the waitlist
🛡️
Founding practice pricing locked in. Join the waitlist now and secure your plan price permanently — pricing will increase at general launch. We're onboarding practices one by one and will reach out within 48 hours of you joining.
Questions & answers

Everything you need to know

Do I really need HIPAA compliance as a solo therapist?
Yes. Any provider who creates, stores, or transmits Protected Health Information (PHI) — which includes almost every therapist, dentist, or chiropractor — is a "covered entity" under HIPAA, regardless of practice size.
How is Hipafy different from using a compliance consultant?
A consultant charges $3,000–$8,000 per engagement and produces static documents. Hipafy generates living documents that update automatically, tracks your BAAs and training, and alerts you when action is needed — all for $199–$499/month.
Are the documents legally valid?
Our documents are drafted to meet the exact requirements of the HIPAA Privacy Rule (45 CFR Part 164) and Security Rule, reviewed by licensed healthcare compliance attorneys. Hipafy is software, not a law firm — we recommend professional review for complex situations.
What happens if regulations change?
We monitor HHS and OCR guidance continuously. When regulations change — like the 2025 Security Rule update — we update your documents automatically and notify you of any actions required. No extra charge.
Do you integrate with SimplePractice or TherapyNotes?
We support all major EHRs including SimplePractice, TherapyNotes, Jane App, and Athenahealth for BAA tracking and vendor identification. Direct integrations are on our 2026 roadmap.
Can I cancel at any time?
Yes — no contracts, no cancellation fees. You keep access to your documents until the end of your billing period. We recommend downloading your compliance package before cancelling.
Staff Training — Included in All Plans

HIPAA training your staff will
actually complete

Short, practical, built for busy clinicians. Five focused modules, a 10-question knowledge check, and a dated certificate that satisfies 45 CFR §164.530(b). Official HHS sources linked throughout.

Hipafy Training Module — 2026
5 modules ~28 min
01
HIPAA Foundations
What it is, who it applies to, real enforcement examples
~5 min
Preview
From this module

HIPAA applies to every provider who transmits health information electronically — regardless of practice size. A solo therapist with one patient is held to the exact same standard as a hospital system. The fines are real: $50,000 per violation for wilful neglect, up to $1.9M per category per year.

Source: HHS OCR · 45 CFR §§160, 164
02
Protected Health Information & Patient Rights
The 18 PHI identifiers, minimum necessary standard, patient access rights
~5 min
🔒 Subscribers
03
Your Daily Responsibilities
Permitted disclosures, real-world scenarios, Notice of Privacy Practices
~8 min
🔒 Subscribers
04
Technology & Security
Email compliance, device security, passwords, remote work rules
~7 min
🔒 Subscribers
05
Breach Recognition & Response
Four-step response procedure, HHS notification timelines, documentation
~5 min
🔒 Subscribers
10-Q Quiz 80% to pass Unlimited retakes
Completion certificate issued on pass
Certificate of Completion
HIPAA Workforce
Training
This certifies that
Your Name Here
Your Practice
01 Foundations
02 PHI & Rights
03 Daily Work
04 Technology
05 Breach Response
Date
May 2026
Score
90%
Valid
May 2027
45 CFR §164.530(b) compliant · Dated · Audit-ready
🔒
Subscriber certificate
Complete all 5 modules and pass the quiz to receive your dated, audit-ready certificate
📄
Based on official HHS guidance
Content references the actual CFR sections. Every claim is linked to the source.
✎
Satisfies documentation requirements
Certificate + training log satisfies 45 CFR §164.530(b). Show an OCR auditor exactly what they need.
👤
Per-staff certificates
Each staff member completes and receives their own dated certificate. Tracked, documented, audit-ready.
Join the waitlist to get access →

Included in all founding practice plans · No extra charge