All programs / HIPAA / Security Program Build
For new practices and established ones whose policies need retooling. Answer guided questions once, and turn them into 12 tailored policies and plans that describe how your practice really protects patient information.
The Security Rule doesn’t just ask whether you protect patient information. It requires you to document how, and to keep that documentation current.
Covered entities must implement written policies and procedures for the Security Rule standards and retain them for six years, under 45 CFR §164.316.
Policies that don’t match your actual systems, staff and vendors are a red flag in any review. They need to describe how your practice really works.
For each addressable safeguard, you must document what you implemented, what alternative you chose, or why it isn’t reasonable for your practice.
All three options use the same questionnaire, so you can start free and step up without redoing your answers.
For practices that want to organize their program information themselves.
No account or payment required
For practices that answer the questions and want the documents done right.
Everything in the free questionnaire, plus:
Documents are generated from your answers as submitted. This option does not include a review or validation by NBT Systems; you are responsible for the accuracy of your answers. Reports and documents are drafted with AI assistance from your answers, using NBT Systems templates.
Order documentation packageFor practices that want professionals to build the program with them.
Introductory price for practices up to 20 staff. Larger practices quoted.
The documentation package and guided build produce a complete, practice-specific set. Both also include conceptual architecture and data-flow diagrams, plus validated versions in the guided build.
Most small practices need two to three hours, which can be split across several sittings. A checklist at the start tells you what to gather first so the questions go quickly.
Leave it blank. Everything missing appears in your missing-information report. Documentation packages are generated exactly as answered, so blanks become placeholders for you to complete; in a guided build, NBT Systems works through open items with you.
Documentation packages are drafted with AI assistance from the answers in your progress file, using NBT Systems templates. They are not reviewed or validated, so their accuracy depends on your answers, and diagrams are conceptual, based on what you describe. In the NBT Systems-guided build, a professional reviews your answers, validates your safeguards and diagrams, and finalizes the documents with you.
They’re tailored drafts ready for your review. Your leadership adopts and signs them. We recommend having counsel review the Notice of Privacy Practices and Business Associate Agreement.
No. The program build gives you policies; the Security Risk Assessment evaluates your risks and safeguards. New programs should finish with a baseline assessment.
No. The questionnaire describes your practice, people, systems and vendors. Please don’t enter patient information anywhere.
Free to start. Expert help when you want it.
