Compliance Tools
Pick the tool by the job in front of you. Building a compliance program from scratch? Start with the policy manual, the privacy notice, and a BAA for each vendor. Checking a program you already have? Run the risk assessment, then the audit checklist, and keep the work plan as your calendar for the year.
Training and onboarding have their own quiz, log, and checklist. If something has already gone wrong, the incident report decides whether it is a reportable breach and the letter generator writes the patient notice. Every tool runs in your browser, prints cleanly, and needs no signup.
HIPAA & Privacy
§ 1648 toolsHIPAA Release Form Generator
Prints a signed patient authorization with every 164.508 core element filled in
HIPAA Compliance Checklist
Tracks each Privacy, Security, and Breach Notification requirement as you build your program
Notice of Privacy Practices
Produces a patient-facing privacy notice you can post, hand out, and put on your website
BAA Template Generator
Drafts a business associate agreement for vendors who will not send you their own
HIPAA Fine Calculator
Shows the penalty range OCR could apply for a given culpability tier and number of violations
HIPAA Policies & Procedures Template
Assembles a printable policy manual you can adopt, sign, and hand to staff
Patient Complaint Form
Gives patients a complaint form and gives you a dated record of how each one was resolved
Social Media Policy
Prints a staff social media policy with review-response wording and a signature line
Risk Management
§ 164.3087 toolsHIPAA Risk Assessment
Walks you through the Security Rule risk analysis and outputs a scored findings report
HIPAA Audit Checklist
Tests your program against OCR's audit protocol and lists the evidence to pull for each item
Exposure Control Plan Template
Writes the OSHA bloodborne pathogens plan, with job classifications and controls filled in
Breach Notification Letter Template
Writes the patient letter for a reportable breach and checks it against 164.404
HIPAA Incident Report Form
Records an incident and runs the four-factor test to decide whether it is a reportable breach
Incident Response Plan
Writes the standing procedure staff follow when PHI may be exposed
OSHA Compliance Checklist
Walks a medical office through its yearly OSHA review, standard by standard
Training & Documentation
§ 164.53012 toolsPatient Intake Form
Builds a new-patient packet with demographics, insurance, and consent on one form
Medical History Form
Builds a medical history questionnaire set up for your specialty
Credentialing Checklist
Tracks each credentialing step per provider, from CAQH to payer approval
Informed Consent Form
Produces a procedure consent form with risks, benefits, alternatives, and signature lines
Good Faith Estimate
Produces a No Surprises Act estimate for self-pay patients, with the required disclaimers
HIPAA Training Quiz
Scores a 20-question staff quiz and gives you a completion record to file
Healthcare Onboarding Checklist
Covers a new hire's first 90 days: access, training, and sign-offs
Insurance Verification Form
Captures eligibility, benefits, and prior-auth details from the payer call in one record
HIPAA Training Log & Acknowledgment
Keeps the yearly training roster and the signed acknowledgment each employee owes
Telehealth Consent Form
Produces a plain-language consent for video and phone visits
Financial Responsibility Form
Prints the payment policy page for the intake packet, ready to sign
Patient Satisfaction Survey
Prints a one-page survey patients can finish in the waiting room
Compliance Operations
§ 164.3164 toolsCompliance Work Plan
Lays out a 12-month calendar of compliance tasks with owners and due dates
Compliance Committee Agenda
Generates the quarterly committee agenda and minutes, mapped to OIG's seven elements
Medical Billing Compliance Checklist
Checks billing risk areas one by one, from modifiers to overpayment refunds
Corrective Action Plan
Turns a finding into a dated plan with owners and a closure sign-off