United States

HIPAA compliance evidence maintained on your infrastructure, under your control

Health Insurance Portability and Accountability Act (HIPAA)

PHI access logging, workforce training records, and breach documentation — all deployed on-premise so PHI never leaves your environment during the compliance process itself.

HHS Office for Civil Rights (OCR)United States
Start Free Trial

30-day free trial · Private deployment included · Cancel anytime

About HIPAA

HIPAA establishes national standards for protecting sensitive patient health information. Covered entities and business associates must implement administrative, physical, and technical safeguards.

Top audit finding

"Workforce training records incomplete or not covering all required HIPAA topics"

Most common HIPAA non-conformance finding

Requirement mapping

HIPAA requirements — and how Certexi addresses them

Framework requirements

  • 1Risk analysis and risk management with documented evidence
  • 2Workforce training with completion records and regular updates
  • 3Access management: workforce access authorization and review records
  • 4PHI access log retention for six years
  • 5Breach assessment with notification decision documentation
  • 6Business associate agreement management

Certexi approach

  • On-premise deployment: PHI never leaves covered entity infrastructure for compliance purposes
  • PHI access logging integrated with clinical operational workflows
  • Workforce training matrix: HIPAA privacy and security training with completion evidence by role
  • Breach workflow: identify → risk score → notification decision → documentation → report
  • OCR investigation response: organized evidence by HIPAA rule and safeguard category

Industry relevance

Sectors where HIPAA compliance applies

Healthcare & Pharma

Core capabilities

Use cases central to HIPAA compliance

access control recordstraining recordsincident reportingaudit preparationrisk assessment

PRECIOS

Alineado al Valor Operativo, No al Número de Usuarios

El precio depende del alcance del despliegue, no del número de usuarios. Tus datos. Tu infraestructura. Tus reglas.

Todos los planes incluyen despliegue privado. Tu información permanece en tu infraestructura.

ISO 27001 Aligned
Private Deployment
Unlimited Users

Piloto

Valida antes de comprometerte

Personalizado

5 lugares por trimestre

  • Despliegue completo de plataforma
  • Soporte de configuración
  • Capacitación e incorporación
  • Acceso directo al equipo de producto
  • Iteración basada en retroalimentación
  • Período de evaluación de 8 semanas

Estándar

Operaciones de una ubicación

Desde $2,500

por mes, facturado anualmente

  • Todas las capacidades centrales
  • Biblioteca de plantillas estándar
  • Despliegue privado incluido
  • Soporte por email (respuesta 24h)
  • Actualizaciones trimestrales
  • Usuarios ilimitados

Enterprise

Multi-ubicación, alto cumplimiento

Personalizado

Basado en alcance del despliegue

  • Todo lo de Estándar
  • Desarrollo de plantillas personalizadas
  • Ingeniero de soporte dedicado
  • Garantías SLA
  • Integraciones avanzadas
  • Opción de despliegue air-gapped

Despliegue Privado Incluido en Todos los Planes

Cada plan incluye despliegue completo en tu infraestructura — Nextcloud, servidores Linux, Docker, Kubernetes o entornos air-gapped. Tu información nunca sale de tu control.

HIPAA compliance evidence that never leaves your infrastructure.

30-day free trial. Private deployment on your infrastructure.

Start Free Trial