Free tool
HIPAA-aware workflow checklist
A working checklist for practices and healthcare vendors planning an automation that touches protected health information. Tick items off as you go, print it for a review meeting, and keep the gaps visible. It is not a certification and it is not legal advice.
- No account needed
- Runs in your browser
- Nothing stored on our servers
practices, clinics and healthcare vendors
HIPAA Workflow Checklist
Runs entirely in this browser. No account, no email gate, nothing stored.
- Free
- No signup
- Browser only
This is a working checklist, not a certification.
HIPAA compliance is determined by the safeguards your organisation actually operates, the policies it follows, the agreements it signs and how it responds to an incident. Completing this page does not make you compliant and is not legal advice. It is a way to find gaps before a project starts, and to give a compliance conversation something concrete to work from.
0 of 30 reviewed
Saved in this browser only. Nothing is sent to a server.
Access control
0/5Data handling
0/5Vendors and agreements
0/5Logging and monitoring
0/5Incidents and recovery
0/5Patient communication
0/5A practical note on AI tools: a signed business associate agreement is the starting point, not the finish line. Ask what the vendor retains, whether inputs are used for training, where the data is processed and how long it stays. Those answers change the risk more than the marketing page does.
What this works out
- Six areas to review: access, data handling, vendors, logging, incidents and patient communication
- A progress count you can save in the browser and return to
- A print view for a compliance or operations meeting
- Plain-language prompts rather than legal citations
If the result raises a question you would rather not answer alone, the related services below are the parts of the business this tool usually points at. There is no obligation attached to any of it.
Questions about this tool
Does completing this checklist make us HIPAA compliant?
No, and any tool that claims otherwise is misleading you. HIPAA compliance is determined by the safeguards your organisation actually operates, the policies it follows, the business associate agreements it signs and how it responds to incidents. This checklist helps you find gaps before a project starts. It is not a certification, an audit or legal advice.
Who should complete it?
Someone who can speak for operations, someone responsible for systems, and whoever owns compliance in the practice. The value is in the disagreement: if two of those people answer the vendor question differently, you have found a real gap rather than a paperwork exercise.
Is my progress stored anywhere?
Only in your own browser's local storage. There is no account, no server and no transmission. Clearing your browser data removes it, and the print view is the durable copy.
Tell us where the manual work is
A 30-minute call. We map the process, tell you what we would automate or build first, and what it costs. No retainer before you agree the scope.
- No retainer before scope is agreed
- Written plan you can act on alone
- Worldwide delivery, on your hours