The public HIPAA layer for independent healthcare.

Twenty-one production-grade resources across ten compliance and security disciplines — tools, training, research, public datasets, open source, an iOS app, a browser extension. The public knowledge layer most HIPAA vendors do not publish.

Unified Risk Assessment

A comprehensive HIPAA risk analysis combining compliance readiness, entity classification, practice profile, and ePHI data flow into a single risk score.

5 minutes to complete
No login required
Instant risk score
Actionable next steps

Why we built this

We did not start by asking practices to trust another platform. We started by building the tools, datasets, guides, apps, and research we believed should already exist for healthcare practices that face hospital-grade HIPAA obligations without hospital-grade budgets. The free layer below is the result — the largest public HIPAA infrastructure surface in independent healthcare.

Most compliance vendors gate this work. They publish shallow checklists, hide the actually-useful artifacts behind sales calls, treat their training and reference data as proprietary. We publish everything: 21 resources across 10 disciplines — compliance education, risk assessment, training, breach intelligence, data mapping, vendor evaluation, public datasets, developer resources, AI-readiness, and consumer-grade tooling.

The free layer helps a practice see the problem clearly. Patient Protect helps the practice run the system required to solve it. The free resources are diagnostic and educational — what to do, where to look, where you stand. The platform is operational — continuous monitoring, BAA tracking, audit-log review, training enforcement, incident response. Most practices need both.

The full inventory

21 production-grade resources. No login. No lead magnets.

Most compliance vendors publish in two or three of these disciplines, behind a sales contact form. We publish across all ten, without one.

See where you stand

Assessments and classification tools that reveal your actual compliance standing.

Ask PIPAA

An AI HIPAA compliance assistant that answers your questions about the Security Rule, Privacy Rule, breach response, risk analysis, and more — free, instant, no login required.

HIPAA Readiness Scan

See what an OCR investigator would see when they look at your practice website. Checks for tracking pixels, security gaps, email vulnerabilities, and missing HIPAA documents — in 30 seconds.

HIPAA Self-Assessment

A seven-question readiness check with action-oriented guidance and clear next steps.

Entity Determination Tool

Determine whether you operate as a covered entity, business associate, hybrid entity, or vendor.

Map your exposure

Trace how patient data moves and where your infrastructure breaks down.

ePHI Data Flow Mapper

Map how patient data moves across vendors, devices, staff, and systems before something leaks.

HIPAA Compliance Roadmap

A step-by-step operational checklist designed to replace checkbox guidance with real work.

Secure Infrastructure Checklist

A technical baseline for hardening storage, devices, networks, and recovery readiness.

Quantify the damage

Estimate what a breach would actually cost your practice.

HIPAA Breach Cost Calculator

Estimate the 10-year financial exposure of a breach for your practice — record count, vendor surface, security profile, $442/record IBM baseline. Looking for a security risk assessment instead? See the free Risk Assessment.

Stay informed

Live breach intelligence, news, and security awareness.

Breach Dashboard

A crawlable breach intelligence view with trends, severity framing, and HHS-context storytelling.

HIPAA Response

Operational responses paired with HIPAA Pulse breach reporting — controls, configurations, and platform actions for each story.

Patient Protect Signal

The free iOS app that packages breach intelligence, tools, and awareness for small practices.

HIPAA Pulse Newsletter

Biweekly email digest of the most important breach, enforcement, and regulatory developments. Free, double opt-in, no upsell.

Train your workforce

Role-specific HIPAA training that meets the §164.530(b) standard.

Free HIPAA Training

Four complete training modules covering Privacy Rule, Security Rule, and compliance fundamentals. Part of an 80-module curriculum across 10 categories. Completion records, role-specific content, refresh cadence.

Reference the rules

Definitions, regulatory citations, and research you can cite.

HIPAA Glossary — 203 Terms

203 HIPAA terms with definitions, regulatory citations, and cross-references. Schema.org DefinedTermSet markup for AI extraction. Bookmark for compliance reviews and BAA negotiations.

Patient Protect Research

Two SSRN working papers on healthcare breach economics — The Cyber-Economic Stack and The Economics of ePHI Exposure — plus quarterly state-of-compliance reports.

Open data and open source

Citable datasets, reference data on GitHub, and an MIT-licensed browser extension. Free to fork, query, or cite.

HIPAA Shield — Browser Extension

Open-source Chromium extension that warns when PHI is being typed into a browser form — especially AI chat tools like ChatGPT, Claude, and Gemini. 100% client-side, MIT licensed, no telemetry.

hipaa-toolkit on GitHub

Open-source HIPAA reference data under CC BY 4.0: 203-term glossary (CSV + JSON), 40+ acronyms, the 18 PHI identifiers, 50-state breach notification quick reference, and four operational templates (BAA, NPP, IRP, Risk Analysis).

Healthcare Breach Dataset

Citable CC BY 4.0 dataset of US healthcare breaches sourced from the HHS OCR Breach Portal with editorial enrichment. CSV + JSON formats, Schema.org Dataset metadata, formal citation format.