Height is a project management platform aimed at engineering and product teams. It offers a clean task interface, sprint boards, and AI-assisted prioritization. Several small business owners and operations managers use it as an Asana or Linear alternative.
It was not built for healthcare. It has no HIPAA compliance program and no published Business Associate Agreement.
The Engineering-First Assumption
Height is designed around software development patterns: sprints, bug tracking, feature requests, and engineering team coordination. Those workflows have different data sensitivity requirements than clinic operations. An engineering sprint board rarely contains information that could identify a patient. A clinic task board often does.
When a practice manager creates a task like “Review incident report — patient discharge concern, Room 4, Wednesday” or “Follow up with Dr. Chen re: lab result communication,” that task contains PHI the moment it connects to an identifiable patient record. Height has no controls for that scenario.
What Clinics Actually Need in a Task Tool
Medical clinic task management has specific requirements that general project managers do not address:
- Immutable audit trail: Every task action, edit, and assignment must be logged in a tamper-resistant record for compliance documentation
- PHI-aware data handling: Task fields, comments, and attachments that may contain PHI need encryption controls and access restrictions
- Role-based access scoped to clinic roles: Front desk, clinical, billing, and administrative staff have different access needs
- Compliance workflow templates: Risk assessments, training cycles, and incident response follow defined procedural patterns
Height offers none of these. PHIGuard offers all of them, with a BAA signed before any data enters the system.
Pricing Comparison
| Height | PHIGuard | |
|---|---|---|
| BAA available | Not published | Included at every tier |
| Pricing model | Per user/month | Per clinic/month |
| HIPAA audit trail | No | Yes, immutable |
| Healthcare compliance templates | No | Yes |
| PHI-specific data controls | No | Yes |
PHIGuard Essentials is $99 per clinic per month. Clinic is $249. Group is $499.
The Switching Case
If your clinic adopted Height because it seemed simpler than heavier enterprise tools, the concern is valid. PHIGuard is also designed to be operationally simple for practice administrators who do not have dedicated IT staff. The difference is that PHIGuard’s simplicity does not come at the cost of compliance coverage.
A practice administrator should not need to maintain a separate compliance checklist to compensate for gaps in their task management tool. PHIGuard handles both layers — the task management and the compliance documentation — in a system built to pass OCR scrutiny.
See PHIGuard’s HIPAA and BAA details. For guidance on evaluating any vendor’s HIPAA claims before you commit, read our vendor HIPAA evaluation guide. For a similar comparison with another product-team-focused tool, see our analysis of Nifty.