Most practices assume their patient software keeps them HIPAA compliant. The software secures its own platform. Everything around it stays your responsibility.
A free readiness check from Pop Box — managed IT and security for Atlanta healthcare practices since 2018.
HIPAA holds your practice responsible for your email, your staff's devices, your network, your phones and your paperwork, and that is where most breaches start. The questions below cover that ground. Answer as accurately as you can, and treat "Not sure" as a normal answer rather than a wrong one.
This is a preliminary screen. It is not the documented Security Risk Assessment that HIPAA requires, and completing it does not establish compliance. Its purpose is to show you where to look. Pop Box is not a law firm and does not provide legal advice.
Your answers go to the Pop Box team so a specialist can talk them through with you. We do not sell or share them, and at no point do we ask for patient information.