HIPAA compliance you can show, not just sign.
The HIPAA Security Rule expects every practice to know where its patient data lives, assess the risks to it, and protect it. Most small practices have a binder or a template and an IT person who has never read it. Cybertitans runs the IT and keeps the HIPAA record of it, so the two match.
Small practices where the office manager is also IT.
- Your last security risk analysis was a template, years ago, or never.
- Patient forms, X-rays and referrals move through email and a shared drive.
- Front desk computers share a login so nobody gets locked out.
- Your practice software vendor handles their app, and nobody handles everything around it.
Plain English version.
A real risk analysis, updated when things change. Safeguards that fit what it found: unique logins, access limited to who needs it, audit trails, encryption, backups and a plan for when something goes wrong. Business associate agreements with every vendor that touches patient data. Staff training. If a breach affects 500 or more people, HHS, the patients and the media have to hear about it within 60 days.
HHS has proposed making MFA and encryption flat-out requirements. That rule isn’t final yet. We set both up now anyway.
We run it and we keep the record.
Microsoft 365 locked down for a practice: MFA and conditional access, encrypted email for anything with patient information, encrypted laptops, and backups you can restore. 24/7 detection on every computer. Every safeguard is tracked against the HIPAA Security Rule in ControlMap, so the risk analysis, the policies and the evidence live in one place and get revisited every year. We sign a business associate agreement, because we should.
How compliance work runsThe price is on the page.
Managed IT runs on TiTAN, and the price is published. TiTAN Core starts at $897 a month for up to ten people. Pro, where most practices belong, is $1,790 a month for up to ten and includes unlimited support. Every tier runs the same security stack: Huntress 24/7 detection, Microsoft 365 locked down properly, backup and patching. HIPAA risk analysis and documentation are scoped once we know where your patient data lives.
See TiTAN and pricingSee where you stand first. Free.
Run the Cyber Insurance Readiness Score. It asks the same questions your carrier and an auditor will. No email, no callback. Want to talk it through after? It’s 20 minutes, or call (651) 300-7030.
Get your Cyber Readiness Score Book 20 minutesWhat practices ask first.
Is there a HIPAA certification?
No. HHS doesn’t certify anyone, and a “HIPAA certified” badge doesn’t mean anything to an investigator. What counts is a current risk analysis and evidence that the safeguards are actually in place. That’s what we build.
Doesn’t our practice software vendor cover this?
They cover their application. HIPAA covers everything else too: email, computers, Wi-Fi, backups, who has access. That’s the part we run.
Will you sign a BAA?
Yes. Anyone managing systems that hold patient data should.
Are you local?
Yes. Cybertitans is based in Woodbury, MN, and works with practices across the Twin Cities. Support is remote first; onsite visits are by appointment, with no travel charge within 30 miles of Woodbury.