Patient ProtectPatient Protect

About

Built by a family that saw the gap between compliance paperwork and actual security.

Patient Protect was founded in Chicago in 2015 because independent practices were being left behind. The compliance vendors produced binders. The breaches kept coming. We brought together clinical expertise, military-grade security architecture, and enterprise SaaS discipline to build what should have existed years earlier — active breach prevention at a price a five-person dental office can actually afford.

Origin

Why we built this.

Angie Perrin spent over a decade as a registered dental hygienist and became a Certified HIPAA Consultant — working inside treatment rooms, managing patient records, and watching practice after practice struggle with compliance obligations they barely understood. The gap between what HIPAA required and what practices actually did was not a minor oversight. It was systemic. Most believed a policy binder on the shelf meant they were protected. They were wrong — and increasingly, they were targets.

Joseph Perrin had spent years as a government CTO building secure infrastructure for federal agencies — zero-trust architecture, classified data handling, real-time threat detection. When Angie described what healthcare practices were doing to “protect” patient data, the answer was almost always: nothing that would survive first contact with an actual attacker. The same threat actors penetrating hospital systems were now pivoting to smaller, undefended practices — and since 2021, attacks on independent providers have risen 6x.

Alexander Perrin saw the market failure for what it was. Fifteen years in enterprise technology made the pattern obvious: vendors like Compliancy Group and Abyde were charging $259 to $2,000 per month for annual assessments and generic templates — documentation exercises that produced zero defensive capability. Practices were paying for a compliance certificate, not protection. When Change Healthcare lost 190 million patient records and $1.5 billion, it proved that paperwork compliance does not equal security. Independent practices face the same threat landscape with none of the infrastructure.

Patient Protect was the response: a platform that treats compliance as an operational security problem, not a paperwork exercise. Real-time monitoring, automated risk assessments, encrypted communication, staff training, and breach simulation — built on military-grade architecture, starting at $39/month. No consultants. No contracts. No false sense of security.

The founding question was never “how do we build compliance software.” It was: “why are practices with compliance software still getting breached?” The answer — that the industry was solving the wrong problem — became the mission. Patient Protect exists to close the gap between what compliance vendors promise and what actually stops a breach.

Leadership

The team.

Alexander Perrin

CEO

Alexander Perrin

SaaS Founder

15 years in enterprise technology. Built the product strategy, market positioning, and growth architecture behind Patient Protect — with the conviction that independent practices deserve real security infrastructure, not paperwork disguised as protection.

Angie Perrin

CSO

Angie Perrin

RDH · Certified HIPAA Consultant

Over 10 years of clinical practice as a registered dental hygienist before moving into compliance strategy. Shaped the platform's risk methodology and anti-checkbox philosophy from direct experience inside the treatment room — not a policy manual.

Joe Perrin

CTO

Joe Perrin

Former Government CTO

Military-grade security architecture background. Designed the zero-trust infrastructure, AES-256-GCM encryption systems, and real-time threat detection layer that protects patient data across every platform module.

Security posture

Built assuming the attacker is already trying.

Most compliance software was built to satisfy an auditor. Patient Protect was built assuming the attacker is already trying.

Every input is validated as if it were malicious. Every session is verified on every request. Every endpoint rejects before it accepts. The platform was designed by someone who built secure infrastructure for government agencies — and it shows in decisions most users will never see but attackers will encounter immediately.

Zero-tolerance input validation

Most platforms handle invalid input gracefully. We reject it silently, log it, and escalate it. Because invalid input isn't a UX problem. It's evidence of malicious intent.

Session hijack detection

Every request validates that the person using the session is the person who started it. Mismatch means immediate termination. Critical for shared-device clinical environments.

AES-256-GCM authenticated encryption

The same standard used for classified government data. Not “we encrypt your data” — authenticated encryption that proves data hasn't been tampered with in session.

What we believe

Positions that shape the platform.

Security first, not documentation first

Most compliance vendors produce paperwork. We build security infrastructure. The difference shows up the day a threat arrives — and one approach has evidence, detection, and response capability while the other has a binder.

Independent practices carry the highest risk

Attacks on independent providers rose 6x since 2021. Healthcare breaches cost $9.8M on average — the highest of any industry. Yet most compliance tools are priced and designed for hospital systems, not 5-person dental offices.

Compliance must be continuous, not annual

A once-a-year risk assessment does not satisfy HIPAA. Compliance drifts the moment you stop watching. Patient Protect runs daily diagnostics, live scoring, and continuous monitoring — because a breach does not wait for your next annual review.

Affordability is a security position

If the tool costs $259/month and the practice skips it, the practice is unprotected. Patient Protect starts at $39/month because pricing that excludes the most vulnerable practices is not a viable compliance strategy.

The problem

Independent practices carry enterprise-grade obligations with none of the infrastructure.

Too much of the compliance market still sells annual binder exercises, generic templates, and consultant dependency. That approach fails small practices the hardest — the ones least able to absorb a breach, a fine, or a shutdown.

Our answer

Security-first compliance software at a price independent practices can actually afford.

Patient Protect replaces static compliance ceremonies with continuous visibility, daily workflows, live diagnostics, and real security infrastructure — starting at $39/month. No consultants required. No upsells to unlock core protection.

Next step

See the platform for yourself.

Start with a free assessment to understand where your practice stands. Move into the platform when you are ready for continuous coverage.