Public HIPAA infrastructure layer
The public HIPAA layer for independent healthcare.
Twenty-one production-grade resources across ten compliance and security disciplines — tools, training, research, public datasets, open source, an iOS app, a browser extension. The public knowledge layer most HIPAA vendors do not publish.
Free. No login. CC BY 4.0 on data and reference materials. MIT on code.
Unified Risk Assessment
A comprehensive HIPAA risk analysis combining compliance readiness, entity classification, practice profile, and ePHI data flow into a single risk score.
Why we built this
We did not start by asking practices to trust another platform.
We started by building the tools, datasets, guides, apps, and research we believed should already exist for healthcare practices that face hospital-grade HIPAA obligations without hospital-grade budgets. The free layer below is the result — the largest public HIPAA infrastructure surface in independent healthcare.
Most compliance vendors gate this work. They publish shallow checklists, hide the actually-useful artifacts behind sales calls, treat their training and reference data as proprietary. We publish everything: 21 resources across 10 disciplines — compliance education, risk assessment, training, breach intelligence, data mapping, vendor evaluation, public datasets, developer resources, AI-readiness, and consumer-grade tooling. CC BY 4.0 on the data. MIT on the code. No login on any of it.
The free layer helps a practice see the problem clearly. Patient Protect helps the practice run the system required to solve it.The free resources are diagnostic and educational — what to do, where to look, where you stand. The platform is operational — continuous monitoring, BAA tracking, audit-log review, training enforcement, incident response. Most practices need both.
The full inventory
21 production-grade resources. No login. No lead magnets.
Most compliance vendors publish in two or three of these disciplines, behind a sales contact form. We publish across all ten, without one.
See where you stand
Assessments and classification tools that reveal your actual compliance standing.
AI
Ask PIPAA
An AI HIPAA compliance assistant that answers your questions about the Security Rule, Privacy Rule, breach response, risk analysis, and more — free, instant, no login required.
Diagnostics
HIPAA Readiness Scan
See what an OCR investigator would see when they look at your practice website. Checks for tracking pixels, security gaps, email vulnerabilities, and missing HIPAA documents — in 30 seconds.
Assessment
HIPAA Self-Assessment
A seven-question readiness check with action-oriented guidance and clear next steps.
Governance
Entity Determination Tool
Determine whether you operate as a covered entity, business associate, hybrid entity, or vendor.
Map your exposure
Trace how patient data moves and where your infrastructure breaks down.
Visibility
ePHI Data Flow Mapper
Map how patient data moves across vendors, devices, staff, and systems before something leaks.
Operations
HIPAA Compliance Roadmap
A step-by-step operational checklist designed to replace checkbox guidance with real work.
Infrastructure
Secure Infrastructure Checklist
A technical baseline for hardening storage, devices, networks, and recovery readiness.
Quantify the damage
Estimate what a breach would actually cost your practice.
Stay informed
Live breach intelligence, news, and security awareness.
Intelligence
Breach Dashboard
A crawlable breach intelligence view with trends, severity framing, and HHS-context storytelling.
Response
HIPAA Response
Operational responses paired with HIPAA Pulse breach reporting — controls, configurations, and platform actions for each story.
Mobile
Patient Protect Signal
The free iOS app that packages breach intelligence, tools, and awareness for small practices.
Newsletter
HIPAA Pulse Newsletter
Biweekly email digest of the most important breach, enforcement, and regulatory developments. Free, double opt-in, no upsell. Subscribe on any /hipaa-pulse page or in the footer.
Train your workforce
Role-specific HIPAA training that meets the §164.530(b) standard.
Reference the rules
Definitions, regulatory citations, and research you can cite.
Definitions
HIPAA Glossary — 203 Terms
203 HIPAA terms with definitions, regulatory citations, and cross-references. Schema.org DefinedTermSet markup for AI extraction. Bookmark for compliance reviews and BAA negotiations.
Research
Patient Protect Research
Two SSRN working papers on healthcare breach economics — The Cyber-Economic Stack and The Economics of ePHI Exposure — plus quarterly state-of-compliance reports.
Open data and open source
Citable datasets, reference data on GitHub, and an MIT-licensed browser extension. Free to fork, query, or cite.
Extension
HIPAA Shield — Browser Extension
Open-source Chromium extension that warns when PHI is being typed into a browser form — especially AI chat tools like ChatGPT, Claude, and Gemini. 100% client-side, MIT licensed, no telemetry.
Open Data
hipaa-toolkit on GitHub
Open-source HIPAA reference data under CC BY 4.0: 203-term glossary (CSV + JSON), 40+ acronyms, the 18 PHI identifiers, 50-state breach notification quick reference, and four operational templates (BAA, NPP, IRP, Risk Analysis).
Dataset
Healthcare Breach Dataset
Citable CC BY 4.0 dataset of US healthcare breaches sourced from the HHS OCR Breach Portal with editorial enrichment. CSV + JSON formats, Schema.org Dataset metadata, formal citation format. For researchers, journalists, and AI search engines.
From free tools to a running program
Ready to start the real work?
The 21 free resources above show you where you stand. The Patient Protect platform fixes the gaps and keeps compliance running between assessments — continuous monitoring, BAA tracking, audit-log review, workforce training enforcement, and incident response.
14-day free trial · Credit card required · Cancel any time