Industry as Community
Figuring out HIPAA compliance doesn’t have to be a solo venture. Use our assessment to see where you stand and how your compliance program compares to others. Use our supplemental materials and policy templates before closing the gaps with our weighted roadmap. And do it all for free or bring us in a partial or full capacity.
“Companies like me” with anonymity.
k-anonymity floor
Slices too small to be safe auto-generalize instead of leaking.
Aggregates only
Every view is a distribution. Pseudonyms only locate you.
Cell suppression
Too-few or near-unanimous stats are withheld entirely.
No raw scores
Only score-band counts are pooled. Your exact number never leaves your tenant.
No PHI stored. Evidence is non-PHI business documents: policies, procedures, trackers, logs, and diagrams. HowToHIPAA is not a system of record for patient data.
Only pay for depth and proof.
Platform is $124 per month with no discount and no fixed-term commitment. Guided Program Development is contact-led and requires a quarterly commitment.
See exactly what you get before paying: a sample report and sample roadmap from a fictional organization, produced by the same pipeline that makes yours. All samples →
Free $0 No payment required | Most popular Platform Subscription $124/month Month-to-month | Guided Program Development Contact us Quarterly commitment | |
|---|---|---|---|
| Self-assessment + evidence | |||
| Compliance program score | |||
| Policy template library | |||
| Supplemental materials | |||
| Peer standing, all categories | partial | full | full |
| Remediation roadmap | – | ||
| AI policy tailoring | – | ||
| Self-generated compliance posture report | – | ||
| HIPAA Compliance initiative guidance | – | – | |
| HIPAA Compliance initiative implementation | – | – | |
| HowToHIPAA HIPAA Compliance Assessment | – | – | |
| User accounts | Up to 5 | Up to 150 | Up to 300 |
| Join Us | Choose plan | Talk to us |
Common Questions
What is the HowToHIPAA HIPAA Compliance Assessment?
A point-in-time firm attestation based on the evidence reviewed as of the issue date; not a certification, guarantee, or audit.
Can I upload materials containing PHI?
No. Evidence is scoped to non-PHI business documentation only: policies, procedures, risk assessments, configurations, and diagrams. Automated screening is a limited safety backstop, not a guarantee; image content may not be automatically scanned until OCR support is available.
Is AI involved in my score?
No. Scores, benchmarks, and roadmap rankings are deterministic math with visible weights. AI features (policy tailoring, remediation drafting, assessment auto-fill, and policy analysis) are off by default; an admin can enable them in Settings (and disable them anytime), everything they produce is a labeled draft for human review, and every request is consent-checked, quota-limited, and PHI-screened.
Can I see the report before paying?
Yes. We publish a sample report and remediation roadmap generated for a fictional organization by the same pipeline that produces customer deliverables. See the samples above the pricing table, or the samples page.
Is the free tier actually free?
Yes. We believe information and basic materials should be free.
Does a self-assessment include a HowToHIPAA evidence review?
No. Free and Platform assessments remain self-assessments. A HowToHIPAA HIPAA Compliance Assessment is available through a separately scoped firm review.
Is this for covered entities or business associates?
Both. Our materials include designations for either, or both.