Industries · Healthcare & dental
IT for practices that handle patient data.
Front desk computers, imaging stations, practice management software and a lot of email with patient details in it. We secure all of it to a written, HIPAA-aligned baseline, sign a Business Associate Agreement, and keep the documentation your auditor will ask for.
What we hear
The problems we see most often.
Shared front-desk logins
One password used by four people means no record of who opened which chart.
Email full of patient data
Referrals and results by email, with no encryption and no protection against look-alike senders.
Questionnaires you can't answer
Cyber insurers and partners ask about MFA, backups and encryption, and nobody is sure.
Vendors with remote access
Imaging and software vendors connect whenever they like, with access no one reviews.
What we set up
On top of the Baseline every client gets.
- Business Associate Agreement. Signed before we touch any system that holds patient data.
- Individual accounts and MFA. Every staff member signs in as themselves, with MFA on every account.
- Encrypted, managed devices. Laptops and workstations encrypted, patched and remotely wipeable.
- Email protection. DMARC, phishing filtering and encrypted email for messages that contain PHI.
- Tested backups. Microsoft 365 and workstation backups with a restore tested every quarter.
- Documentation on file. Risk analysis support, policies and a record of the controls in place.
Recommended plan
Most healthcare & dental clients choose Secure.
Compliance needs managed EDR, email security and Microsoft 365 backup, which start on Secure.
Secure
Recommended$129per user / month
- Everything in Essential
- 4-business-hour response target
- Managed EDR + email security
- M365 backup + staff training
Related services
Where most of the work happens.
FAQ
What clients in your industry ask.
- Will you sign a BAA?
- Yes, for every healthcare client, before we access any system that stores patient data.
- Does using you make us HIPAA compliant?
- Compliance belongs to your practice. We put HIPAA-aligned technical controls in place and document them so you can show your work.
- Can you work with our practice management vendor?
- Yes. We coordinate with them on updates, access and support, and review the access they have.
Find out where your IT stands.
A free 30-minute review of your IT environment, security posture, email and backups, with a concise written assessment and prioritized recommendations.
No pressure. If your setup is fine, we'll tell you.