HIPAA Compliance Company Policies

Handle PHI? Adopt these free 25 policies and be one step closer to HIPAA compliance.

HIPAA compliance is complicated, but it doesn't have to be. In an effort to make compliance as easy as possible for companies working with protected health information (PHI), we decided to open source our HIPAA policies.

These policies have been written with modern, cloud-based technology vendors in mind. I looked far and wide for policy examples that fit our client, and couldn't find any. So we wrote our own. Importantly, these policies have been through three external audits—two HIPAA audits and one HITRUST audit.

 View on GitHub Recommend ImprovementsFull Documentation

For the Modern Cloud Company

Because we crafted these policies for ourselves, we had the profile of a modern cloud healthcare company in mind. They are tailored specifically for you, including our business associate agreement (BAA).

Audited 3 Times Over

These policies have gone through two HIPAA audits and one HITRUST audit. They have been validated by independent third parties.