Behavioral Health · Medical Offices · Dental Practices · SRA Remediation · Call: (812) 929-5887

Protect Your
Patients' Trust.
Shield Your Practice.

Local HIPAA Compliance Experts in Bloomington, IN.

Cyber insurance renewal coming up? We make sure you can answer every question on the application honestly.

Explore Services
SRA Compliance Kit Illustration
A complete SRA SRA stands for Security Risk Assessment. It's a required annual audit of your practice's physical and digital security measures under the HIPAA Security Rule. service right-sized for solo providers and micro-teams (1–2 staff members) to reach full HIPAA compliance without hiring a consultant.
  • • Step-by-step SRA Remediation is the action plan you follow to fix any security gaps found in your SRA (like turning on drive encryption or setting automatic screen locks). remediation
  • • Ready-to-adopt policies
  • • Expert support
What's an SRA?

Reduce the Risk of HIPAA Fines

OCR is actively auditing, so get documented compliance.

Know Exactly Where You Stand

Documented proof of due diligence if you're ever investigated.

Close Real Security Gaps

Actual risks identified and remediated, not just paperwork.

Earn Patients' Confidence

Demonstrate that their most sensitive information is handled with care.

Services

Security Risk Analysis (SRA)
Comprehensive structured assessment workflows that uncover gaps before they turn into audit or incident problems.
SRA Remediation
Hands-on remediation support to close the gaps identified in the assessment and translate findings into a practical action plan.
Managed HIPAA Compliance
Ongoing oversight for practices that want continuous compliance support instead of a single project.
Managed IT & Security
Right-sized IT operations and cybersecurity support for healthcare practices of all sizes.
HIPAA Policies, Training & Audit Prep
Foundational administrative safeguards including policy templates, staff training, and audit readiness.
Telehealth & Practice Tech Guidance
Software selection and implementation support for secure, HIPAA-compliant practice operations.

Don't Guess on Your Cyber Insurance Application

Insurance carriers are denying coverage and raising premiums for practices that cannot demonstrate basic security controls. Our compliance package gives you documented proof that your practice meets their requirements.

Completed Annual SRA
A current Security Risk Assessment is the first thing every carrier asks for.
Written Security Policies
Documented policies and procedures prove your practice has safeguards in place.
Staff Training with Certificates
Tracked completion records and certificates show your workforce is trained.
Encryption, MFA, and Backup Verification
Technical controls verified and documented so you can answer with confidence.
Incident Response Plan
A documented plan showing your practice is prepared for security incidents.
Audit-Ready Documentation
Everything organized so you can hand it to your carrier, auditor, or attorney.

When your carrier asks "are you compliant?" you will have the paperwork to prove it.

View Compliance Packages

Compliance & Remediation Pricing

Structured compliance toolkits and live expert support to guide your practice through HIPAA alignment.

Compliance Toolkit
SRA Compliance Kit
$299 Right-sized for solo & 1–2 person practices
  • ✔ Concise Intake Questionnaire
    Simple, plain-English intake questionnaire with no technical jargon required.
  • ✔ Compliance Officer Reviewed (48h)
    Delivered within 48 hours because a compliance officer personally reviews your answers to ensure complete accuracy.
  • ✔ Customized SRA & Remediation Plan
    Full Administrative, Physical, and Technical Safeguards analysis, Threat & Vulnerability matrix, and prioritized step-by-step remediation guide.
  • ✔ Customized Policies & Procedures
    Tailored policies and procedures manual covering administrative, physical, and technical safeguards, ready to adopt and sign.
  • ✔ Training & Certificates (1 Year)
    Full access to interactive security awareness training modules for you and your workforce, with downloadable completion certificates.
  • ✔ 1 Hour Live Remote Support
    One hour of live remote support from a compliance technician via phone or screen-share to walk through your assessment and configure systems.
  • ✔ Free Email Support (full duration)
    Unlimited email access to a compliance specialist for the full duration of your SRA and remediation work.
  • ✔ 30-Day Money-Back Guarantee
    If you are not satisfied with your SRA report and compliance materials, request a full refund within 30 days.
Get Started - $299
Add-on Support
1-on-1 Support
$150 Flexible 3-hour technical support block
  • ✔ Remote Support
    One-on-one live technical support conducted remotely via secure screen share or phone consultation.
  • ✔ Live Remote Remediation
    A technician connects with you live to walk through identified vulnerabilities and help you implement technical fixes directly on your systems.
  • ✔ Compliance Portal Training
    We walk you through our portal to show you how to manage policies, procedures, logging, and security training for your workforce.
  • ✔ SRA Review
    A comprehensive final review of your completed Security Risk Assessment to ensure all safeguards are documented correctly.
  • ✔ Device Encryption Setup
    Live assistance configuring and verifying BitLocker, FileVault, or mobile device encryption to ensure your physical hardware meets technical safeguard standards.
  • ✔ Secure Communication Setup
    Help setting up or reviewing HIPAA-compliant email accounts, secure messaging configurations, and business associate agreements (BAAs) with your communication providers.
  • ✔ Audit Readiness Check
    We review your completed compliance records, policies, and remediation evidence to ensure you are fully prepared for HIPAA audits or insurance reviews.
  • ✔ Flexible Scheduling
    You can break up your 3 hours of support and use the time in whatever increments you need (e.g., 20 minutes today for portal questions, 15 minutes next week for backup checks, or an hour session for final SRA review) until your total 3 hours are fully utilized.
Get Started - $150 add-on
Use time in flexible increments as needed
Mandatory Federal Requirement
Workforce Compliance 45 CFR § 164.308(a)(5)

HIPAA Staff Training & Verified Certificates

Satisfy federal workforce training requirements under 45 CFR § 164.308(a)(5). Interactive 15-minute modules with instant verifiable certificates for your compliance binder.

Solo Provider
Solo Training
$99 / year (1 User Included)
  • ✔ 45 CFR § 164.308(a)(5) Aligned
    Curriculum strictly satisfies 100% of federal HIPAA Security & Privacy Rule workforce training requirements.
  • ✔ Fast 15-Minute Modules
    Engaging online micro-lessons designed to be completed in 15 minutes with practical clinical scenarios.
  • ✔ Instant Verifiable Certificate
    Downloadable certificate featuring a unique verification ID and QR code for your compliance binder.
  • ✔ 2026 Modern Threat Focus
    Covers modern AI phishing, social engineering, telehealth, and mobile device PHI handling.
  • ✔ 100% Compliance Guarantee
    Full money-back refund if rejected by any regulatory auditor or cyber insurance underwriter.
Most Popular
Small Practice Training
$149 / year (Up to 5 Staff)
  • ✔ All Solo Features Included
    Full access to the 45 CFR § 164.308(a)(5) curriculum and instant verifiable certificates.
  • ✔ Up to 5 Workforce Members
    Enroll and manage training seats for up to 5 employees, receptionists, or clinicians.
  • ✔ Central Staff Tracking Dashboard
    Practice director dashboard to monitor individual employee progress, completion status, and quiz scores.
  • ✔ Automated Retraining Reminders
    Automated email notifications so your clinic never misses mandatory annual retraining deadlines.
  • ✔ Individual Staff Certificates
    Accredited certificate issued in each employee's name upon passing the end-of-module quiz.
Growing Clinic
Full Practice Training
$249 / year (Up to 15 Staff)
  • ✔ All Small Practice Training Features
    Includes central staff tracking dashboard, automated reminders, and individual certificates.
  • ✔ Up to 15 Workforce Members
    Full team coverage for growing medical clinics, multi-doctor dental practices, and therapy groups.
  • ✔ Exportable Audit Compliance Log
    One-click export of your practice training roster and completion timestamps ready for HIPAA audits.
  • ✔ Priority Compliance Support
    Direct email and ticket assistance for questions regarding staff training compliance.
🛡️ 100% Statutory Compliance Guarantee: 100% refund if rejected by any auditor or insurance carrier for training criteria.
Have 15+ staff? Contact us for group pricing.

Secure Website Hosting Pricing

Compliant, HIPAA-decoupled web hosting tailored for healthcare websites and patient portals.

Secure Website Hosting
LiteSpeed
Hosting
$9.99 /mo, billed annually ($119.94/yr)
  • ✔ 1 Website
    Host your primary practice or clinic website with dedicated performance isolation.
  • ✔ Free SSL
    Automatically installed and renewed SSL certificate securing all visitor traffic.
  • ✔ Web Security & Encryption Standards
    Enforces TLS 1.3 encryption, secure HTTP headers, and protected cipher suites.
  • ✔ LiteSpeed Optimized
    High-performance LiteSpeed web server delivering up to 6x faster page loads than standard Apache hosting.
  • ✔ cPanel Access
    Industry-standard cPanel control panel to easily manage domains, files, and DNS records.
  • ✔ NVMe Disk Space
    Ultra-fast enterprise NVMe solid-state storage for rapid database queries and instant page rendering.
  • ✔ Unlimited Free Migrations
    Our technical team will migrate your existing website from your current host at zero extra charge.
Get Started
Secure Website Hosting
Zero-ePHI
Hosting
$12.49 /mo, billed annually ($149.94/yr)
  • ✔ Up to 5 Websites
    Host up to 5 separate practice domains or landing pages on an isolated server instance.
  • ✔ HIPAA-Decoupled
    Purpose-built architecture preventing public website servers from storing or exposing electronic Protected Health Information (ePHI).
  • ✔ Secure intake forms integration
    Safe configuration connecting patient contact and intake forms to encrypted, HIPAA-compliant endpoints.
  • ✔ Free SSL
    Automatically installed and renewed SSL certificate securing all visitor traffic.
  • ✔ Encryption Standards (TLS 1.3)
    Automated cryptographic protection ensuring all data in transit between patients and your website is encrypted.
  • ✔ Daily Encrypted backups
    Automated daily backups encrypted at rest with instant 1-click restore capabilities.
  • ✔ LiteSpeed Optimized
    Enterprise LiteSpeed server stack for top Google Core Web Vitals performance and fast mobile loading.
  • ✔ cPanel Access
    Full administrative cPanel access with phpMyAdmin, file manager, and DNS management tools.
  • ✔ NVMe Disk Space
    High-throughput enterprise NVMe solid-state disk array with redundancy.
  • ✔ Unlimited Free Migrations
    Hassle-free site migration performed by our engineers with zero downtime.
  • ✔ Website Maintenance & Support
    Routine security patching, server-level monitoring, and hands-on technical support.
Get Started

How we help

Move from assessment to remediation without losing momentum. Our approach keeps progress visible and manageable.

Assess
Run the Security Risk Analysis and identify required, addressable, and remediation-heavy areas across your practice.
Prioritize
Separate urgent operational risks from longer-range compliance improvements so action is focused and manageable.
Document
Translate findings into specific next steps for technical safeguards, updated policies, and required documentation.
Train
Make sure staff understand what changed and that completion can be demonstrated with certificates and quiz records.

Recommended Hardware

Practical, HIPAA-ready hardware choices for small healthcare practices.

Workstations
Dell OptiPlex or similar business-grade workstations with full-disk encryption enabled.
Encryption at rest required
Routers & Networking
Cisco Meraki or Ubiquiti UniFi with VLAN support, firewall, and guest network isolation.
Network segmentation required
Backup Solutions
Acronis or Veeam with encrypted offsite and cloud backup for data availability and recovery.
Backup & recovery required
Security Devices
YubiKey hardware MFA tokens for staff authentication that reduce credential-based breach risk.
MFA strongly recommended

Recommended Software & Systems

Vetted tools that fit small healthcare practice workflows and HIPAA requirements.

EHR Platforms
SimplePractice or TherapyNotes
HIPAA BAA included. Built for behavioral health and medical practices.
BAA available
Encrypted Email
Paubox or Proton Mail for Business
End-to-end encrypted email that requires no action from the recipient to stay secure.
Encryption in transit required
MFA Tools
Duo Security or Microsoft Authenticator
Multi-factor authentication for staff logins across all systems and devices.
MFA strongly recommended
Secure Telehealth
Doxy.me or Zoom for Healthcare
HIPAA-compliant video platforms with Business Associate Agreements available.
BAA available

FAQ

No. We support behavioral health providers, medical offices, dental practices, and small healthcare organizations throughout Bloomington, Indiana and surrounding areas.

Yes. Remediation is a core service, and we can help translate findings into a practical action plan with concrete next steps for your practice.

Yes. Training completion, quiz progress, and certificates are all tracked in the portal so staff can complete modules at their own pace.

Contact

Share a few details and we'll follow up about SRA work, remediation, training, or managed support.

LOCAL HIPAA COMPLIANCE CONSULTING

Based in Monroe County, Bloomington HIPAA Systems proudly provides dedicated HIPAA compliance auditing, Security Risk Assessments (SRA), and custom hardware/software remediation solutions to medical clinics, dental offices, and behavioral health providers throughout Bloomington, Ellettsville, Bedford, Martinsville, and Greater South-Central Indiana.