Start here
Find out if your practice is actually HIPAA compliant.
The Unified Risk Assessment combines compliance readiness, entity classification, practice profile, and ePHI data flow into a single risk score — free, anonymous, and instant.
Unified Risk Assessment
A comprehensive HIPAA risk analysis combining compliance readiness, entity classification, practice profile, and ePHI data flow into a single risk score.
Why free
Compliance intelligence should not depend on your budget.
Independent healthcare practices are the fastest-growing target for cyberattacks, but they are the least likely to have a security team or a compliance budget that covers the tools they actually need. Most risk assessments, breach dashboards, and policy generators are locked behind enterprise subscriptions that start at $200 to $400 a month — before the first employee finishes onboarding.
Every tool on this page is 100% free. No login. No credit card. No trial timer that locks you out after 14 days. No feature gates. The risk score, the breach intelligence, the cost calculators, the checklists — they are fully functional, permanently available, and designed to give a solo practitioner the same situational awareness that a hospital system pays six figures to maintain.
We built them this way because a dental office in rural Ohio and a behavioral health clinic in downtown Chicago face the same regulatory obligations. The only difference is resources. Removing that barrier is not a marketing strategy — it is the reason Patient Protect exists.
If these tools are all you ever use, you will still be better prepared than most practices running paid compliance software. When you are ready for continuous monitoring, automated evidence collection, secure messaging, and the full operating system — Patient Protect starts at $39/month. But the free tools stand on their own.
Free tools
Every tool your practice needs to understand its exposure.
No lead magnets. Each tool helps a practice understand its exposure, take an immediate action, and build confidence before spending anything.
See where you stand
Assessments and classification tools that reveal your actual compliance standing.
AI
Ask PIPAA
An AI HIPAA compliance assistant that answers your questions about the Security Rule, Privacy Rule, breach response, risk analysis, and more — free, instant, no login required.
Diagnostics
HIPAA Readiness Scan
See what an OCR investigator would see when they look at your practice website. Checks for tracking pixels, security gaps, email vulnerabilities, and missing HIPAA documents — in 30 seconds.
Assessment
HIPAA Self-Assessment
A seven-question readiness check with action-oriented guidance and clear next steps.
Governance
Entity Determination Tool
Determine whether you operate as a covered entity, business associate, hybrid entity, or vendor.
Map your exposure
Trace how patient data moves and where your infrastructure breaks down.
Visibility
ePHI Data Flow Mapper
Map how patient data moves across vendors, devices, staff, and systems before something leaks.
Operations
HIPAA Compliance Roadmap
A step-by-step operational checklist designed to replace checkbox guidance with real work.
Infrastructure
Secure Infrastructure Checklist
A technical baseline for hardening storage, devices, networks, and recovery readiness.
Quantify the damage
Estimate what a breach would actually cost your practice.
Stay informed
Live breach intelligence, news, and security awareness.
Intelligence
Breach Dashboard
A crawlable breach intelligence view with trends, severity framing, and HHS-context storytelling.
Response
HIPAA Response
Operational responses paired with HIPAA Pulse breach reporting — controls, configurations, and platform actions for each story.
Mobile
Patient Protect Signal
The free iOS app that packages breach intelligence, tools, and awareness for small practices.
Ready for continuous coverage?
The free tools show you where you stand. The platform fixes the gaps and keeps compliance current as the office changes.