The assessment experience
HIPAA assessments,
without the dread.
One calm, easy question at a time.
The assessment everyone puts off, made quiet and clear. Questions in everyday words, a head start from your own documents, and an honest view of the finish line.
Assess · Identify · Improve · Verify · Be confident
What it feels like
Not a form. A quiet walk to the finish line.
Most compliance tools hand you a dense spreadsheet and a deadline. ComplianceAX shows you one easy-to-understand question per screen, beside a calm view, with a real sense of how far is left.
Do all staff complete security awareness training when they are hired and at least once a year after that?
"All workforce members complete security awareness training within 30 days of hire and annually thereafter."Security Policy v3.pdf, page 4
Why this matters. Trained staff are the first defense against phishing and accidental disclosure. 45 CFR 164.308(a)(5)
Not sure? Skip it, you can come back.
- Assess
- Identify
- Improve
- Verify
- Be confident
12 to go · about 4 minutes
Music
Layer in
- Above the Clouds (excerpt), ComplianceAX, generated on our own server with ACE-Step 1.5 (MIT (model); our own audio)
- Ocean waves, Jarrod stanley (CC0)
- Stream, Dsw4 (Public domain)
- Forest birds, ezwa (Public domain)
- Soft rain, kvgarlic (Freesound, via Wikimedia Commons) (CC0)
- Night crickets, hc (Public domain)
- Still Lake (excerpt), ComplianceAX, generated on our own server with ACE-Step 1.5 (MIT (model); our own audio)
- Shoreline at Dawn (excerpt), ComplianceAX, generated on our own server with ACE-Step 1.5 (MIT (model); our own audio)
- Forest Light (excerpt), ComplianceAX, generated on our own server with ACE-Step 1.5 (MIT (model); our own audio)
- Night Sky (excerpt), ComplianceAX, generated on our own server with ACE-Step 1.5 (MIT (model); our own audio)
Take a slow breath.
Look how far you have come already.
Easy to understand
One short sentence per screen, in everyday words with no jargon, written to about an 8th-grade reading level. Answer Yes, No or Not applicable.
Permission to pause
Not sure? Skip it and come back. Hand it to a colleague who knows. Every answer saves as you go.
Always know the finish line
Real numbers, not cheerleading. You always see how many are left and roughly how long they will take.
Nobody knows your office better than you do.
We just help you put it on the record.
A head start
Start ahead, not from zero.
Upload the policies you already have. Private AI reads them and suggests answers, each one with the exact sentence it came from.
- Cite or stay silent. No supporting sentence in your document means no suggestion.
- You decide. Accept or change each suggestion, one at a time. Nothing counts until you do.
- Private. All AI runs on private models in secure data centers. No patient data goes to public AI services.
"All workforce members complete security awareness training within 30 days of hire and annually thereafter."Security Policy v3.pdf, page 4
Shown with its source. Counted only when you accept it.
After the assessment
The rest of the year, just as calm.
Every No becomes a next step in your plan, not a mark against you. Then ComplianceAX keeps the rest of the program in one quiet place.
Your people
Policies to read and sign, training to finish, and a short list of tasks for each person. Nothing more than they need.
Your vendors
Who handles your patient data, and whether the business associate agreement is signed and current.
When something goes wrong
A steady, guided case file with the 60-day breach clock in view. The breach decision always stays with a person.
When someone asks
One packet with every answer, document and decision, as of any date you choose.
If HHS comes calling
If an auditor ever calls, we have your back.
Your evidence, already organized. One click builds a dated packet of everything you have done. And you won't face it alone.
Support and organization, not legal representation. We're not your lawyer, and no one can promise an audit outcome.
One click, one packet
A dated packet of everything you have done, as of any date you choose: answers, evidence, policies and their history, training, business associate agreements, incidents and the audit log.
Traced to the regulation
Every HIPAA requirement links to the question and the document behind it, so you can show where each one is covered.
Kept safe for six years
Evidence is stored with the date and the person who added it, and kept for six years.
People who help
Our team helps you gather and present your evidence and documentation, and prepare your response.
For business associates
Only the questions that are yours.
IT providers, billing companies and other vendors that handle patient data get their own assessment. No waiting-room or patient-notice questions, plus the duties HIPAA gives business associates.
For business associatesTraced to the regulation
Nothing quietly left out.
Every HIPAA obligation is traced to a question and to the evidence behind your answer. A regulation coverage view shows administrators exactly where each rule is covered.
How coverage worksQuestions
Good questions to ask
Who is ComplianceAX for?
Small medical and dental practices, and the business associates who serve them, such as IT providers and billing companies. If HIPAA applies to you and you have no compliance team, it was made for you.
Will we understand the questions?
Yes. Every question is one short sentence in everyday words, written to about an 8th-grade reading level, with no legal jargon. A note explains why it matters, and the rule it comes from is there if you want it.
Do we have to finish in one sitting?
No. Every answer saves as you go. Stop whenever you like and pick up exactly where you left off.
Does AI answer the assessment for us?
No. AI may suggest an answer only when it can quote your own document word for word, and nothing counts until someone on your team accepts it. Scores, attestations and breach decisions are always made by people.
Is my data sent to OpenAI or Google?
No. All AI in ComplianceAX runs on private models in secure data centers. No patient data is sent to public AI services.
What happens if we get audited?
You won't face it alone. ComplianceAX builds a dated auditor packet in one click, with your answers, evidence, policies and their history, training, business associate agreements, incidents and the audit log. Every HIPAA requirement is traced to the question and the document behind it, and evidence is kept for six years. Our team helps you gather and present your evidence and documentation and prepare your response. This is support, not legal representation, and no one can promise an outcome.
Does finishing the assessment make us compliant?
No software can promise that, and we never will. ComplianceAX helps you find what needs attention, fix it and keep a complete record. It is not legal advice.
When you're ready, we'll walk it with you.
Request a 30-minute demo. We'll show you the assessment, the head start from your own documents and what a finished record looks like. No pressure, no rush.