Drafting, mapping, and evidence work that used to take a consultant a week, done in the platform in an afternoon.
What this module does
- Policy generation from your actual environment, not a generic library
- Risk analysis assistance — suggested threat/vulnerability pairs per asset
- Evidence interpretation: reads a config export, tells you which control it satisfies
- Answers questions about your own posture, with links to the underlying record
- Security questionnaire and customer-audit response drafting
What it replaces
- Paying consultant rates for document assembly
- Generic policy templates that describe a company you are not
- Weeks lost to security questionnaires from prospects
How it maps to the rule
Every item above is linked to a specific implementation specification in 45 CFR §164. Open any control and you see the citation, whether it is required or addressable, what you have implemented, and the evidence proving it. If a specification is addressable and you chose not to implement it, the platform makes you record the rationale — because that rationale is the thing an investigator asks for.
Included in every plan
Starter, Growth, and Enterprise all include this module. We do not price HIPAA modules separately, because a partial Security Rule implementation is not a product, it is a liability.
What happens after you fill the form
- You get the deliverable immediately. No “a rep will contact you to unlock your download.”
- We read your answers before we call. The scoping call starts with what you told us, not a discovery script.
- You get a fixed-scope, fixed-price proposal in 2 business days — or a straight “you don’t need us yet,” which we say more often than you’d expect.
On the word “certified.” There is no government HIPAA certification. Any vendor selling you a “HIPAA Certificate” is selling a PDF they printed themselves. What regulators, customers, and insurers actually accept is a documented risk analysis, implemented safeguards, and evidence that both are maintained. That is what SuperHIPAA produces.