IT for practices that protect patient information.
Security, backups, and support for clinics, dental and specialty practices, therapists, and other healthcare offices.
The IT problems that slow healthcare and medical offices down.
- Patient data. Electronic health information has to be protected under federal and Texas law.
- Uptime. Scheduling, charting, and imaging can’t wait on a broken computer.
- Staff training. Texas law sets its own training deadlines for staff who handle health information.
- Vendors. Practice software, imaging, and billing vendors all need secure access.
Rules that may apply
A plain-English summary of the security and privacy rules we hear about most. Not every rule applies to every office.
HIPAA Security Rule
Covered entities and their business associates must protect electronic protected health information with administrative, physical, and technical safeguards, starting with a risk analysis.
Texas Medical Records Privacy Act
Texas Health and Safety Code Chapter 181 defines covered entities more broadly than HIPAA. Staff must be trained on state and federal health privacy law within 90 days of hire, and again within a year of a material change in the law, with signed completion statements kept for six years.
Source: Tex. Health & Safety Code 181.101 (opens in a new tab)
Texas breach notification law
Texas businesses that hold sensitive personal information must use reasonable procedures to protect it, notify affected people no later than 60 days after a breach is confirmed, and notify the Texas Attorney General within 30 days if 250 or more Texans are affected.
Source: Bus. & Com. Code Ch. 521 (opens in a new tab) · Texas AG breach reporting (opens in a new tab)
Technical controls we help put in place
Quoted as projects or as part of a managed plan. Your firm stays responsible for its compliance program; we handle the technical side.
Risk analysis support
Technical inventory and findings to support the risk analysis your practice is responsible for.
Access controls
Unique sign-ins, MFA, and automatic lock on systems with patient data.
Encryption
Device and email encryption for patient information.
Backup and restore tests
Backups of practice data, with restores tested and documented.
Training records
Security awareness training with completion records you can keep with your HIPAA files.
Vendor access
Remote access for practice software vendors set up securely and logged.
How we help
The services healthcare and medical offices ask us for most.
Cybersecurity
Practical security for small businesses: the controls that help protect against common attacks, set up and reviewed with you.
Learn more →Compliance Support
Help putting the technical controls and records in place that clients, insurers, and regulators ask about.
Learn more →Backup & Disaster Recovery
There’s no one-size backup. We match the protection to what your business can’t afford to lose, how fast you need it back, and your budget.
Learn more →Help Desk Support
Help desk support for your team by phone, email, or the client portal, from technicians who know your setup.
Learn more →Hardware & Procurement
Business-class computers, network gear, and peripherals sourced, configured, and delivered ready to use.
Learn more →Business Phone Systems
Cloud phone systems for small offices: desk phones, mobile apps, auto attendants, and call routing set up the way you work.
Learn more →
Local, accountable, and straightforward.
- Texas-basedOur office is in Springtown, and we work across Dallas-Fort Worth and Central Texas.
- Plain EnglishWe explain what we found, what it costs, and what we recommend. No jargon.
- Security firstWe start with the security basics that help protect against common attacks.
- Your choice of planA managed plan built around you, or hourly help with no contract.
Common questions
Is an IT provider a HIPAA business associate?
Usually, if it can access systems that hold patient information. We sign a business associate agreement (BAA) with healthcare clients before we access systems that hold patient information.
Can you do our HIPAA risk analysis?
We can provide the technical inventory and findings that feed into it. Your practice owns the risk analysis and its decisions.
Do you give legal or compliance advice?
No. We handle the technical controls and documentation. Legal questions go to your attorney or privacy officer.
Let’s talk about your IT.
A short, no-pressure conversation about what’s working and what isn’t.