About hipaa.systems
Plain, independent answers about HIPAA for small healthcare practices and the companies that serve them — with a source and a date for every fact.
Why it exists
Most HIPAA information is either the regulation itself or vendor marketing. Small practices and health tech teams need something in between: what the rules actually require, which tools will sign a business associate agreement and on which plan, and what to do next. That is what we publish.
How we work
- Every statement about the law cites 45 CFR, HHS guidance or a court decision; every product fact links to the vendor's own documentation and carries the date we checked it.
- We separate what HIPAA requires from HHS guidance and from our own recommendations.
- We never call a product "HIPAA compliant"; we say whether a BAA exists, on what terms, and what you still have to do.
- We use AI tools to research and draft; a person checks every page against its sources. Details in our methodology.
- Mistakes are corrected in the open — see our corrections policy.
Who runs it
hipaa.systems is run by an independent publisher, not a law firm, a compliance consultancy or a healthcare provider. What we sell is downloadable document templates — not medical services, legal services or consulting — and we do not receive or process patient data. We don't offer legal or medical advice, and we don't claim credentials we don't have. What we bring is structured research: every statement is tied to a primary source you can open yourself, every vendor fact carries the date we checked it, and the methodology, corrections and funding are public. The operator's name and contact details are on our contact page.
How it is funded
No commissions, sponsorships, ads or lead sales. We plan to fund the site one way: by selling our own HIPAA templates and staff training, which are in preparation — see how we make money and what we're preparing.
Contact
Contact us — questions, corrections, or vendor updates.