Compliance work is mostly organized paperwork, honest gap-finding and evidence collection. We run that work for you: risk assessments, policies, vendor agreements, staff training and the evidence your auditor or certifying body will ask for. Certifications and audit opinions are issued by independent auditors and certifying bodies, and we get you ready for them.
HIPAA risk assessment and policies
We run your HIPAA security risk assessment, write or update your policies and procedures, and build a plan to close the gaps.
SOC 2 readiness
Gap assessment, controls, policies and evidence collection so you're ready when your independent auditor starts.
ISO 27001 readiness
Scope, risk register, statement of applicability and the documented management system the standard asks for.
LegitScript certification support
Application preparation and website review for pharmacies, telehealth companies and supplement brands.
GDPR
Data maps, privacy notices, data processing agreements and request handling for customers in Europe.
Vendor BAAs and agreements
An inventory of vendors that touch sensitive data, with the right agreements in place and tracked.
Staff training
Short, role-based training with completion records.
Evidence collection
A tidy evidence library your auditor can work from, kept current throughout the year.
Example deliverables. Your proposal lists exactly what's included for your project.
Example deliverables
- HIPAA security risk assessment report and remediation plan
- Policies and procedures written for your organization
- SOC 2 or ISO 27001 gap assessment and readiness plan
- LegitScript application package and website review
- GDPR data map and privacy documents
- Vendor inventory with BAAs and data processing agreements tracked
- Staff training with completion records
- Evidence library for your auditor
How we work
- A free call to understand the problem and what you use today
- A written proposal with the scope and timeline
- Designs or a prototype you approve before we build
- Testing with your real scenarios before launch
- Launch, staff training and handover documents
- Ongoing support and improvements if you want them
Industries where this solution fits. Each page shows everything we build for that field.