Resource library
Templates, downloadable tools, vendor comparisons, and a learning center built for the operators who actually keep a small clinic running.
Downloadable worksheets and reference materials you can use without creating an account.
Download a plain-English BAA template reviewed against 45 CFR §164.504(e). Editable DOCX format. Built for covered entities who need to execute agreements with business associates without an in-house legal team.
A 10-step checklist for onboarding new clinical or administrative staff to your clinic's HIPAA compliance program.
A printable, one-page decision tree that guides your team through the 45 CFR §164.402 breach determination: Was PHI involved? Was it unsecured? Does an exception apply? Who must be notified and when?
A step-by-step risk analysis worksheet built on the NIST SP 800-66 Rev 2 methodology. Covers threat identification, vulnerability assessment, likelihood and impact scoring, and residual risk documentation. Required by 45 CFR §164.308(a)(1)(ii)(A).
A fill-in-the-blank incident response plan template that satisfies the §164.308(a)(6) Security Incident Procedures safeguard.
A ready-to-use tracker for BAA status across every vendor who touches your clinic's PHI. Know exactly who you've covered — and who you haven't.
Topic hubs for the workflows that most often drive HIPAA confusion inside small clinics.
If your clinic is currently using Asana, Monday, Trello, Notion, or similar, these are the BAA, audit trail, and pricing questions to answer before PHI moves in.
PHIGuard against named competitors on features, BAA coverage, workflow fit, and pricing model.
How HIPAA task management maps to the day-to-day operations of specific specialties.
Fresh educational content from the learning center, focused on practical HIPAA operations instead of generic blog commentary.
These resources give you the policy and workflow layer. PHIGuard turns the ongoing work into assigned tasks, audit evidence, incident records, and repeatable operational controls.
Start a 30-day trial — card required, reminder email sent 3 days before billing