HIPAA compliance software for small practices.
One Guy Consulting's HIPAA (Health Insurance Portability and Accountability Act) compliance software helps small practices automate their Security Risk Assessment, policies, and BAAs. Built by founder Chuck Weiselberg, the platform combines automation with the Full-Scope option's monthly 1:1 implementation support. The tool centralizes gap analysis, remediation plans, and reminders so practices finish documentation faster and can demonstrate their work.
Chuck Weiselberg, Founder: Our software leans on automation to handle paperwork, tracking, and reminders for small practices.
What our software automates
You answer 63 questions in our HIPAA compliance software portal, and I’ll give you:
- Automated gap analysis
- Automatic creation of remediation plans
- AI-tailored HIPAA policy and procedure templates
- Execute Business Associate Agreements via e-sign and store them in our tool
- An incident requires investigation by the Privacy Officer.
- The annual deadline nears to report the prior calendar year’s small breaches (under 500 people) to HHS, due within 60 days of year end (45 CFR 164.408(c); see the HHS Breach Notification Rule guidance).
- You are 30 days, then 3 days, from the one-year mark since your last Security Risk Assessment (HHS OCR risk analysis guidance).
- Staff are signed up for training.
- Staff require re-training.
Plans and pricing: Full-Scope, monthly, 12 months or 24 months
Flat rate, no per-user fees. Pick monthly, 12 months, or 24 months.
- The full software platform
- 4 hours a month of 1:1 implementation calls with Chuck
- Incident response guidance
- CMS audit response support
How Full-Scope works
Full-Scope pairs the full software platform with 4 hours a month of 1:1 implementation calls with Chuck. You also get incident response guidance, and audit response support if you receive a CMS audit or an OCR letter or investigation.
Official guidance: HHS Office for Civil Rights (HIPAA guidance), HHS HIPAA Breach Notification Rule guidance, and CMS Medicare Fee-for-Service compliance programs (audits).
Who it's for: small medical, dental and therapy practices
Small medical, dental and therapy practices, and the business associates that serve them, that know HIPAA is more than a risk assessment but don't have the time or budget for a traditional consultant.
Built by the person who runs it.
Roughly 23,000 meetings and 3,500 organizations later: Zero clients fined. Zero failed audits.
Chuck Weiselberg · Queens, NY · HIPAA since 2015
FAQ
What does One Guy Consulting's HIPAA compliance software do?+
You answer 63 questions in the Security Risk Assessment. The software then builds your gap analysis, writes your remediation plans, drafts AI-tailored policy and procedure templates, executes Business Associate Agreements by e-signature, and sends the reminders that keep the program current.
Is it AI?+
Not by strict definitions. The software leans heavily on automation, with AI working end to end behind the scenes. What matters is what it automates: the paperwork, the tracking and the reminders a small practice would otherwise do by hand.
How is this different from Vanta, Drata or Sprinto?+
Those platforms cover many frameworks, mostly SOC 2, and are built for software companies. This one is built only for HIPAA and for small healthcare practices and their business associates, and Full-Scope includes 4 hours a month of 1:1 implementation calls with Chuck to get your plan set up.
How much does the software cost?+
One plan, three ways to pay. Full-Scope is $120/month, $1,300 per 12 months, or $2,300 per 24 months. No per-user fees.
What does Full-Scope include?+
Full-Scope includes the full software platform plus 4 hours a month of 1:1 implementation calls with Chuck, incident response guidance, and CMS audit response support.
Does software make my practice HIPAA compliant?+
No software can do that on its own. HIPAA requires you to actually carry out your policies, train your staff and manage your risks. The software does the documentation and tracking so that work takes weeks, not months, and you can prove it was done.
Who is it for?+
Small medical, dental and therapy practices, and the business associates that serve them, that know HIPAA is more than a risk assessment but don't have the time or budget for a traditional consultant.
63 questions. Then the software takes it from there.
Full-Scope pairs the software with four hours a month with Chuck.