HIPAA-aligned IT for medical practices
without the enterprise price tag.
We sign a BAA on day one, run SentinelOne EDR with 24/7 US SOC monitoring, and deliver an annual HIPAA Security Risk Analysis with a prioritized remediation plan — for $89/user/month. No 3-year lock-in, no PCI-style surprise fees.
Veteran-owned (SDVOSB) · Atlanta-local · 90-day money-back guarantee
The six things HIPAA actually wants from your MSP
Not a feature list — the audit checklist. We do all six, name the tools, and put it in writing.
BAA on day one
We sign a Business Associate Agreement before you give us read access to anything. Every subprocessor in our stack (SentinelOne, Sophos, Microsoft 365, ConnectWise) is itself BAA-eligible.
EDR + MDR coverage
SentinelOne EDR on every endpoint with 24/7 SOC monitoring through our ConnectWise partnership — 200+ US-based analysts. Real humans triaging real alerts at 3 AM, not just dashboards.
Encrypted, retained backups
Daily encrypted backups to our Atlanta-region cloud with 7-year HIPAA-compliant retention. Tested restores monthly so you know they actually work when audit asks.
Access control + audit logs
Microsoft 365 / Active Directory hardening with role-based access, MFA everywhere, immutable audit logs. The kind of trail the OCR investigator wants to see.
Incident response runbook
Documented breach-response runbook with the 60-day notification clock built in. We've practiced it in tabletop exercises so the first time you need it isn't game day.
Risk assessment + remediation
Annual HIPAA Security Risk Analysis aligned to NIST 800-66. We deliver the gap report AND a prioritized remediation plan — not just a PDF you file.
We name our stack on purpose
You shouldn't have to wait until contract signing to find out what's actually defending your patient data.
We'll list the BAA-coverage status of every subprocessor in your contract addendum.
Transparent pricing
Per user, month-to-month, no PCI-style surprise fees. Cancel anytime in the first 90 days for a full refund.
Core
- 24/7 helpdesk (US-based)
- Endpoint management + patching
- Microsoft 365 administration
- SentinelOne EDR included
- Monthly health reports
Professional
- Everything in Core
- HIPAA / SOC 2 / GLBA compliance program
- Encrypted backups + tested restores
- Annual risk assessment + remediation plan
- Incident response runbook
- Quarterly business reviews with vCIO
Enterprise
- Everything in Professional
- Dedicated account engineer
- Custom SLA + change-management
- Multi-site / multi-EHR support
- Onsite quarterly visits
Schedule a 30-min discovery call
Tell us a bit about your practice. We'll send the BAA before the call so legal can review.