IT for medical and dental practices, with HIPAA built in
We support medical and dental practices whose days run on practice management software, electronic records, imaging and a schedule that doesn’t wait. We bring deep HIPAA knowledge and experience to protecting patient data and network security, so the practice keeps running and stays compliant.
What it costs when IT gets in the way
The schedule stops at 8am
Practice management software won’t open with a full day booked. Patients wait, staff call the vendor, and nobody knows whether it’s the server, the network or the software.
The risk analysis that’s three years old
HIPAA requires a security risk analysis, and it’s one of the first documents regulators ask for after a breach. If yours is a checklist someone filled out years ago, it doesn’t describe the practice you run today.
The imaging computer nobody touches
The computer running your X-ray or imaging software is years out of date because everyone’s afraid to update it, and it sits on the same network as the front desk.
What we handle for medical and dental practices
- HIPAA Security Rule risk analysis, with a remediation plan in priority order
- Practice management, EHR and imaging systems kept running, coordinated with your software vendors
- Encrypted workstations and laptops, and multi-factor authentication
- Separate networks for clinical systems, staff and patient Wi-Fi
- Secure email and file sharing for patient information
- Access controls and audit logs
- Endpoint and identity monitoring around the clock (see Cybersecurity)
- Staff security awareness training
- Tested backup and recovery, so records come back fast
Medical and dental, both
Medical and dental practices share HIPAA, but they run different technology: EHRs, labs and patient portals on one side; imaging sensors, intraoral cameras and chairside computers on the other. We support both kinds of practice today, single offices and multi-location groups.
HIPAA, handled properly
The HIPAA Security Rule requires practices to analyze the risks to electronic protected health information, put administrative, physical and technical safeguards in place, and document them. We run the risk analysis, fix what it finds in priority order, and keep your policies and evidence current, so you’re ready when a payer, an auditor or the Office for Civil Rights asks. We sign a business associate agreement with every practice we support.
Frequently asked questions
Do you understand HIPAA?
Yes. We have deep HIPAA knowledge and experience, and we support medical and dental practices today. We run Security Rule risk analyses, put the safeguards in place and keep the documentation current.
Will you work with our software vendors?
Yes. We coordinate with your practice management, EHR and imaging vendors, so you aren’t stuck in the middle when something breaks.
What should we do if we suspect a breach or clicked a phishing link?
Call (860) 512-7255 rather than email, and don’t turn the computer off unless we ask you to. Clients are covered by the response times in their support agreement; if you’re not a client, we respond to security emergencies within 2 hours during business hours.
Do you support both medical and dental offices?
Yes, both, from single offices to multi-location practices.
What to expect
Who this is for
Primary care, specialty and dental practices, from single offices to multi-location groups, in eastern Connecticut, Rhode Island and south-central Massachusetts, with compliance work delivered remotely nationwide.
How we price
Every agreement is built from the services you actually need, so you’re not paying for a bundle you don’t use. We value partnership with our clients over making a buck. We also have to make a buck to keep delivering that value. So we look for the arrangement that works for both of us.
What happens next
- We reply and set up a 15-minute call at a time that suits you.
- We talk through what you have, what’s at risk and what it should cost.
- If we’re a good fit, we send a written proposal, including any assessment work and what it will cost.
Let’s talk. A real conversation, not a sales call.
Fifteen minutes is usually enough to know whether we’re the right fit. If we’re not, we’ll tell you — and point you to someone who is.