CRU TechnologiesHIPAA Binder Builder

Sample binder

This is the binder the wizard generates for a fictional practice, Granite City Family Dental, a dental office with 9 staff in 412 2nd Street South, St. Cloud, MN 56301. Every document below is produced from that practice's answers; yours will read the same way with your names, systems and decisions.

The sample deliberately includes a few gaps (no MFA on the EHR, an unsigned vendor agreement) so you can see how the binder turns a gap into a risk-register item and a line on the remaining-steps checklist.
#Document
00Binder cover, index and how to use this binderView
01Entity profile and covered-entity / business-associate determinationView
02Privacy Officer and Security Officer designation lettersView
03Compliance program charter and annual calendarView
04Documentation and record retention policyView
05Sanction policy and sanction logView
06Notice of Privacy PracticesView
07Uses and disclosures, minimum necessary and verification policyView
08Authorization form; marketing, fundraising and sale of PHI policyView
09Patient rights procedures, request forms and logsView
10Complaint handling and mitigation policyView
11Safeguards for PHI in all forms (paper, oral, fax, mail, text, social media)View
12Workforce training policy and rosterView
13Security risk analysis report and risk management planView
14Workforce security and information access managementView
15Security awareness, password and authentication policyView
16Security incident response plan, ransomware playbook and incident logView
17Contingency plan: backup, disaster recovery, emergency mode, testingView
18Evaluation and annual review procedureView
19Business associate policy, agreement template and registerView
20Physical safeguards: facility, workstation, device and media controlsView
21Technical safeguards: access, audit, integrity, authentication, transmissionView
22Breach notification policy, four-factor worksheet and notice lettersView
23Minnesota Health Records Act supplement and consent formView
24Annual review meeting minutes and attestationView
25Registers and logs appendixView
26Confidentiality agreement and workforce acknowledgment formsView
27Remaining steps and information still neededView

Get started   Pricing