HIPAA Compliance Checklist
The safeguards HIPAA auditors and healthcare buyers actually check — administrative, physical, and technical safeguards, breach notification, and the documentation auditors expect. All in one free PDF.
Get your free HIPAA Compliance Checklist
Enter your work email and download instantly — no sales call required.
What's Inside
Five practical sections covering the HIPAA safeguards that come up in every healthcare security review and OCR audit.
Administrative Safeguards
Risk analysis, workforce training, business associate agreements, and sanction policies — the program controls OCR reviewers start with.
Physical Safeguards
Facility access controls, workstation security, and device and media controls that protect where PHI actually lives.
Technical Safeguards
Access control, audit logging, encryption, and integrity controls for the systems that store and transmit PHI.
Breach Notification
Incident response steps plus the notification rules and timelines you must follow when PHI is exposed.
Documentation & Policies
The required policies, procedures, and evidence auditors expect to see documented and maintained.
Who This Checklist Is For
Built for healthcare and health-tech teams working toward HIPAA compliance.
Healthcare IT & Security Leads
mapping safeguards across systems
Compliance & Privacy Officers
closing gaps before an audit
Health-Tech Founders
clearing HIPAA reviews to sell
Frequently Asked Questions
Who is this HIPAA checklist for?
Healthcare IT and security leads, compliance and privacy officers, and health-tech founders — whether you're a covered entity, a business associate, or a startup handling PHI for the first time. It's written to be practical for teams of 10-200.
Is the checklist really free?
Yes — 100% free, no credit card, no sales call required. Enter your work email and the PDF downloads immediately. We may occasionally send you relevant security and compliance content, and you can unsubscribe any time.
How does this relate to SOC 2 or managed compliance?
HIPAA's safeguards overlap heavily with SOC 2 controls, so working through this checklist gives you a head start on both. When you want help implementing the safeguards rather than just tracking them, PlatOps offers managed cloud, security, and compliance support.
Not Sure What to Fix First?
Book a free 1-hour call with a senior engineer. Tell us what worries you about downtime, cloud costs, email or security, and leave knowing what to do first.
You leave with
No commitment. Video call or phone, whichever you prefer.
Run by senior engineers, serving clients since 2014.
On the call
We look at what keeps your business running
Uptime
Will your site and systems stay up?
Cloud bill
Where the money goes and what to cut
Does it reach the inbox? Can anyone fake it?
Security
The gaps an attacker would find first
Prefer it in writing?
See a sample of our written review