NBT Systems compliance programs home Partner with us

All programs / MSP and MSSP partners

Your brand. Our compliance engine.

Offer HIPAA and CMMC compliance services under your own name. We launch and host a white-label compliance site on your domain, and prepare client deliverables behind the scenes, so you can sell compliance without building a practice from scratch.

See partner plansBook a partner call

Add compliance to your service catalog

Your clients already trust you with their IT and security. Healthcare practices need an annual HIPAA risk analysis, and defense contractors need CMMC. The White-Label Compliance Toolkit gives you a client-ready way to deliver both.

Your brand everywhere

Your logo, colors and contact details on your site, every questionnaire and every report. Clients see your firm, not ours.

Live in days, not months

We set up your site on your own domain and keep it hosted and updated. You add one DNS record; we handle the rest.

Your clients stay yours

You own the relationship. We work behind the scenes and never contact your clients directly.

How it works

  1. Launch your site

    We build your branded compliance site and connect it to a subdomain of your domain. Hosting and updates are on us.

  2. Clients complete questionnaires

    Your clients use the free questionnaires on your site, or your team runs guided sessions with them.

  3. Send us the file

    When a client orders a report or documentation, you send us their progress file through a secure upload.

  4. Deliver under your brand

    We prepare the deliverable with your branding, typically within five business days. You deliver it and keep the relationship.

Partner plans

One plan, billed monthly or annually. Report preparation, documentation packages and guided engagements are available at partner pricing, so you set your own retail prices and keep the margin.

Monthly

Partner plan

Flexible month-to-month billing.

$99per month

Billed monthly

  • Your own white-label compliance site on your domain (for example, compliance.yourfirm.com), hosted and maintained by NBT Systems
  • HIPAA and CMMC landing pages, sample report and readiness worksheet with your logo, colors, contact details and booking link
  • All three questionnaires: HIPAA Security Risk Assessment, HIPAA Security Program Build and CMMC Level 1
  • Ongoing updates and new programs as they launch, including CMMC Level 2
  • Partner pricing on report preparation, documentation packages and guided engagements
  • Onboarding and email support
Start the monthly plan
Annual

Partner plan

Best value: about two months free compared with monthly.

$995per year

Billed annually

  • Your own white-label compliance site on your domain (for example, compliance.yourfirm.com), hosted and maintained by NBT Systems
  • HIPAA and CMMC landing pages, sample report and readiness worksheet with your logo, colors, contact details and booking link
  • All three questionnaires: HIPAA Security Risk Assessment, HIPAA Security Program Build and CMMC Level 1
  • Ongoing updates and new programs as they launch, including CMMC Level 2
  • Partner pricing on report preparation, documentation packages and guided engagements
  • Onboarding and email support
Start the annual plan
Founding partner offer: our first partners receive 20% off their plan. Ask about it when you contact us.
The programs

What your clients get

Ready-built programs with Security Rule and FAR citations throughout.

  • HIPAA Security Risk Assessment: 73 questions aligned to the HHS SRA Tool, threat ratings, and instant risk, findings and remediation reports with charts
  • HIPAA Security Program Build: collects everything a practice’s security policies need
  • CMMC Level 1 Program Build: scoping and the status of all 15 requirements
  • Readiness worksheet and progress files clients can save and send
Your business

How partners use it

Package compliance the way your business works.

  • Offer a free self-assessment as a lead magnet
  • Resell reports and documentation at your own prices
  • Subcontract guided engagements delivered under your brand
  • Use findings to open conversations about EDR, backup, MFA and other managed services

See it in action

The live NBT Systems editions show exactly what your clients would use, with your branding in place of ours.

HIPAA

Security Risk Assessment

Guided assessment with instant reports.

Try it
HIPAA

Security Program Build

Policy data collection for new or retooling practices.

Try it
CMMC

Level 1 Program Build

Requirement status and documentation data.

Try it

Want to see a finished deliverable? View the sample Security Risk Analysis report.

Partner questions

Who is the partner program for?

Managed service providers, managed security service providers, vCISOs and IT consultants who serve healthcare practices or defense contractors and want to offer compliance services under their own brand.

Can we use our own domain?

Yes. Your site runs on a subdomain of your domain, such as compliance.yourfirm.com. You add one DNS record, and we host and maintain the site.

Who prepares the reports and documentation?

NBT Systems, with your branding. You send us a client’s progress file, and we return the finished deliverable, typically within five business days, for you to deliver.

Do you contact our clients?

No. You own the client relationship. We work behind the scenes and never reach out to your clients directly.

What happens to client data?

Questionnaire answers stay in your client’s browser until they save a progress file. Files you send us are used only to prepare the deliverable you ordered.

Can we set our own prices?

Yes. Partner pricing on reports and engagements leaves room for your margin, and you decide what your clients pay.

Is CMMC Level 2 included?

CMMC Level 2 is in development and will be added to partner sites when it launches.

Does the toolkit certify compliance?

No. It helps your clients assess and document their programs. HHS does not certify HIPAA compliance, and CMMC Level 1 status comes from the contractor’s own self-assessment and affirmation.

Ready to offer compliance under your brand?

Tell us about your clients and we’ll show you how the program fits.

Contact us about partneringBook a partner call