From the studio

Notes on staying compliant.

Plain-English writing on HIPAA, web compliance, and building healthcare sites that hold up.

HIPAAJune 18, 20264 min read
The contact-form gap almost every practice site has
Why an open message box is a HIPAA exposure you never designed, and how to close it for good.
ComplianceMay 27, 20264 min read
Do you actually need a BAA with your web team?
What a Business Associate Agreement covers, what it doesn't, and when it stops being optional.
EngineeringMay 9, 20262 min read
Why we keep patient data off your website entirely
The decoupled architecture that turns a breach into nothing to have.

Start here

Find out if you’re exposed.

The free audit reads only what is publicly available: your live site, its forms, where a submission appears to go, and the third parties already riding along on the page. We never touch your systems, and all we need is your URL. You get your likely exposure in writing, at no cost.

Free · public information only · no access to your systems

Notes on staying compliant.

The contact-form gap almost every practice site has

Do you actually need a BAA with your web team?

Why we keep patient data off your website entirely

Find out if you’re exposed.