Free templates

Free, editable HIPAA templates. Email address, instant download, no sales call.

Unique user identification, role definitions, provisioning and deprovisioning, emergency access, and the review cadence.

The §164.308(a)(8) periodic evaluation as a run-book: what to re-test, what to re-document, and what to hand leadership.

A BAA containing every provision §164.504(e) requires, in two versions: covered entity to BA, and BA to subcontractor.

A bring-your-own-device policy covering enrolment, containerisation, remote wipe, and the consent language you need from staff.

A role-based training deck plus the attendance and acknowledgement register that turns completion into evidence.

Encryption standards at rest, in transit, and on removable media, with the addressable-specification rationale structure included.

The full Security, Privacy, and Breach Notification policy set — 28 editable documents with the rule citation on every section.

A working risk assessment workbook: asset inventory, threat/vulnerability pairing, scoring matrix, and a risk register that populates itself.

An incident response plan with the four-factor breach assessment worksheet, notification decision tree, and 60-day clock tracker built in.

A password and authentication policy aligned to §164.312(d) and current NIST guidance, not 2003 complexity folklore.

Physical and technical safeguards for a distributed workforce — the section most remote-first health tech companies leave blank.