HIPAA & AI-Tools Self-Check

For Care Organizations & HealthTech Product Teams

For:
Practices, clinics and care organizations running more tools than their BAAs cover — and HealthTech teams whose product has to be HIPAA-defensible before the next round or the next enterprise deal.
Why it matters:
Between 2023 and 2026 most care organizations and HealthTech products added tools — transcription, cloud storage, chat, an AI assistant — faster than anyone reviewed them. OCR has made an inadequate or missing risk analysis an explicit enforcement priority, and a proposed 2025 update to the HIPAA Security Rule would make today's "addressable" safeguards mandatory. This scorecard tells you where your exposure actually is, not where you assume it is.

This is a self-assessment based on what you tell us — not a legal opinion, not a compliance certification, and not a substitute for a technical audit of your systems.

How to Use

  1. First, tell us whether you run a care organization or build a HealthTech product — the questions that follow are different for each.
  2. For each question, click the option that best describes your situation.
  3. Your exposure score updates as you answer — treat it as preliminary until all nine are in, then it's final. Questions marked "not applicable" are left out of the calculation rather than quietly lowering your result.

greenice.net | September 2026

19 years | 200+ projects | HIPAA & BAA experience

0
Which best describes you?
This decides which nine questions you'll see next. Not scored.

Your result

Complete all questions to see your result.

⚠️

This is worth a technical review, not just a policy update

Based on what you told us, this isn't something a document template fixes on its own.

Score Interpretation

0% – 20%
Low Exposure
Based on what you told us, the basics are in place across the areas we asked about. Worth revisiting annually, and whenever a new tool gets added.
21% – 60%
Moderate Exposure
Based on what you told us, real gaps exist in at least one area that matters — often BAA coverage on a tool nobody reviewed, or a risk analysis that's out of date. A focused review finds the expensive ones first.
61% – 100%
High Exposure
Based on what you told us, several of the areas we asked about show real gaps. The fastest path forward is a HIPAA & AI-tool review: map every system that touches PHI, rank what's actually risky, then fix it.

Free 30-Minute Technical Call

We'll walk through your specific gaps, based on what you told us above, and lay out what a fixed-scope HIPAA & AI-tool review would actually cover for you.

Get your estimate now

OR LEAVE YOUR EMAIL AND WE’LL CONTACT YOU WITHIN THE SAME BUSINESS DAY

We reply within one business day, with a person, not a sequence. No newsletter, no drip campaign.