Starter
Core readiness tools for a small organization beginning a structured program.
- Seats
- 10
- Entities
- 1
- Trial
- 14 days
Paid compliance operating platform
Compare plans and explore advisory, assessment, training, vendor, incident, evidence, and reporting services. HIPAAmart supports readiness work; it does not certify compliance or provide legal advice.
Readiness and advisory services are not a government certification, legal opinion, or guarantee of compliance.
Starter
Professional
Enterprise
Managed
Catalog version 2026.08
Assess
A guided, versioned assessment of administrative, physical, and technical safeguards with a risk register and remediation plan.
Operate
A central dashboard for controls, owners, evidence, due dates, approvals, readiness signals, and executive reporting.
Document
Versioned policy templates, organization variables, approvals, review dates, acknowledgments, and evidence history.
Train
Role-based training assignments, quizzes, certificates, reminders, annual renewal, and completion reporting.
Govern
Track BA determinations, agreements, subcontractors, expiration dates, reviews, and supporting evidence.
Govern
Questionnaires, due diligence, risk scoring, document requests, findings, and recurring reassessments.
Respond
Incident intake, investigation timelines, four-factor assessment support, deadlines, approvals, and corrective actions.
Prove
Private evidence records with control mapping, versions, retention, expiration reminders, and access history.
Assess
A focused maturity and control-gap review that produces prioritized remediation work and an executive summary.
Improve
Turn findings into owned tasks with severity, dependencies, due dates, evidence requirements, and reporting.
Advise
A human-assisted review of submitted evidence and workflows, clearly labeled as readiness and advisory support.
Advise
Recurring oversight for policy reviews, risk reviews, training, vendor governance, evidence, and management reporting.
Operate
Recurring obligations, review cycles, reminders, assignments, escalations, and completion evidence.
Respond
Guided ransomware and breach scenarios with role assignments, decisions, lessons learned, and corrective actions.
Document
Generate organization-specific policy packs, registers, forms, training records, BAA records, and readiness packages.
Assess
Inventory tracking technologies and data flows, document safeguards, and create privacy and security remediation work.
Advise
Book advisory sessions, submit questions, retain case history, attach evidence, and track recommendations.
Govern
Parent-child organizations, delegated administrators, shared controls, local evidence, and roll-up reporting.
Connect
Auditable APIs and webhooks for HRIS, identity, ticketing, documents, security tools, LMS, and customer systems.