About CompyMax
We publish researched HIPAA compliance verdicts: 72 and counting, each sourced from vendor documentation and dated, and build the software that turns a compliance programme into evidence a client will accept. The research is free and carries no affiliate links; the software is how we make money. Keeping those two things separate is the whole model.
How the research is produced, sourced and corrected is documented in our editorial standards. Last updated .
Keep reading
- Vendor compliance checkerVerdicts on the tools small healthcare organizations actually run.
- HIPAA glossaryPlain-language definitions, each with its citation.
- HIPAA compliance checklistEvery requirement, in order, with the evidence that proves it.
- Free HIPAA readiness scoreTwelve questions, each citing its regulation, scored in your browser.
- HIPAA to SOC 2 crosswalkAll 68 controls mapped to SOC 2 and NIST CSF, and the eight gaps.
- HIPAA training requirementsWho must be trained, how often, and what proof to keep.
- Is HIPAA certification real?No organization can hold one. What HHS says, and what to build instead.
- HIPAA compliance auditsThe three different things called an audit, and what each asks for.
- What an OCR audit isThe HITECH audit programme and a complaint-driven investigation are not the same thing.
- Practice management softwareHow to evaluate what a vendor is actually offering you.
- How we researchSourcing, review cadence and corrections policy.
Contact
Questions, corrections or anything else: support@hipaacompliancesoftware.org. Corrections to published research are made with a dated note in the entry’s change history, never silently.