Service 03
HIPAA compliance
The technical safeguards, written down and kept current, so an audit is paperwork instead of panic.
What it is
HIPAA is not a product you install. It is a set of controls and the evidence that those controls exist. We handle the technical side and keep the record.
We run the risk analysis, fix what it finds, and maintain the documentation your practice needs on the day someone asks for it.
What's included
- Annual security risk analysis with a written remediation plan
- Role-based access control and unique logins for every user
- Encryption at rest and in transit across workstations, servers and backups
- Audit logging and retention on systems holding patient data
- Written policies and procedures kept current
- Business associate agreement in place from day one
How it works
Risk analysis
We assess systems, access and data flow, then rank findings by real-world risk.
Remediate
Gaps are closed on a schedule, with each fix recorded against the finding.
Maintain
Policies, logs and evidence are reviewed each year so nothing goes stale.
Also from Legend
Network design and buildouts
Cabling, switching and wireless designed for operatories and imaging traffic.
02Cybersecurity
Layered defence against ransomware and phishing, monitored around the clock.
04Cloud and practice management
Secure access to imaging and patient records without an ageing on-site server.
Start with the assessment.
Thirty minutes on your network, your backups and your HIPAA exposure. You keep the findings whether or not you work with us.