Free tools

HIPAA templates, worksheets, and logs for clinic operations.

This hub lists every downloadable resource in the library so templates are reachable from one crawlable page and can connect back into the right learning or buying path.

All downloadable resources

Choose the template or worksheet that matches the clinic task.

Assessment tool BAA Termination Checklist Free HIPAA BAA termination checklist. Step-by-step guide for ending a vendor relationship compliantly — PHI return, destruction certification, and registry... Template Free BAA Template Pack Free HIPAA Business Associate Agreement template. Plain-English BAA for covered entities. 45 CFR §164.504(e) compliant. Download the DOCX. Quick reference Free HIPAA Authorization Form Template Free HIPAA authorization form template. Required for marketing, research, psychotherapy notes, and sale of PHI under 45 CFR §164.508. Download now. Quick reference Free HIPAA Release Form Template Free HIPAA release form template. Covers all required 45 CFR §164.508 elements. Download and customize for your clinic's release-of-information process. Assessment tool Healthcare Vendor BAA Tracker Free healthcare vendor BAA tracker. Track BAA status, expiration dates, and risk tier for every business associate. Required for HIPAA compliance. Quick reference HIPAA Access Log Template Free HIPAA access log template. Covers audit controls under 45 CFR §164.312(b) and activity review under §164.308(a)(1)(ii)(D). Download for your clinic. Assessment tool HIPAA Access Review Checklist Free HIPAA access review checklist for medical clinics. System-by-system review template with excess access log, termination check, and documentation guide. Assessment tool HIPAA AI Governance Framework for Small Clinics HIPAA AI governance framework for small clinics. Risk analysis, BAA vetting, prohibited uses, and approved-tool list for ambient scribes and AI coding. Assessment tool HIPAA AI Tool Vetting Checklist Free HIPAA AI tool vetting checklist. Evaluate BAA availability, data residency, training data policy, certifications, and breach notification before. Assessment tool HIPAA AI Use Policy Template Free HIPAA AI use policy template for medical clinics. Covers approved AI tools, PHI prohibitions in consumer AI, BAA requirements, and incident reporting... Assessment tool HIPAA Annual Compliance Audit Checklist Free HIPAA annual compliance program audit checklist. Eight elements, action items, responsible roles, regulatory citations, and evidence binder guide. Assessment tool HIPAA Annual Review Calendar Free HIPAA Annual Review Calendar for small clinics. 12-month planner covering training, risk analysis, BAA reviews, policy reviews, and access audits. Quick reference HIPAA Annual Training Log Template Free HIPAA annual training log template for clinics. Attendance table, attestation signatures, topics checklist, and 6-year retention guidance. OCR audit ready. Quick reference HIPAA BAA Template HIPAA BAA template for clinics: required provisions under 45 CFR §§164.504(e), 164.308(b), and 164.314(a), red flags, and a vendor tracker. Quick reference HIPAA Breach Notification Decision Tree Free HIPAA breach notification decision tree. Step-by-step guide to determine if a security incident is a reportable breach under 45 CFR §§164.400–414. Template HIPAA Breach Notification Template Free HIPAA breach notification letter template. All required elements per 45 CFR § 164.404(c), notification path checklist, and media notice guidance. Download. Assessment tool HIPAA Complaint Response Template Free HIPAA complaint response template for clinics. Complaint intake, acknowledgment letter, investigation form, outcome notice, and corrective action... Template HIPAA Compliance Budget Planner Free HIPAA compliance budget planner for small clinics. Line-item costs for software, training, risk analysis, and breach reserve across 3 staff-size scenarios. Quick reference HIPAA Compliance Self-Assessment Free HIPAA compliance self-assessment for small clinics. Score your current operating posture across BAAs, training, incidents, and task ownership. Quick reference HIPAA Contingency Plan Template Free HIPAA contingency plan template. Covers all five 45 CFR §164.308(a)(7) components: data backup, disaster recovery, and emergency mode. Download. Quick reference HIPAA Covered Entity Determination Guide Determine if your practice is a HIPAA covered entity. Decision tree, electronic transaction trigger, and examples under 45 CFR § 160.103. Quick reference HIPAA Data Backup Plan Template Free HIPAA data backup plan template. Covers 45 CFR §164.308(a)(7)(ii)(A): backup frequency, retention, and restoration testing. Download for your clinic. Quick reference HIPAA Employee Acknowledgement HIPAA employee acknowledgement template: training, sanction policy, and PHI sign-off per 45 CFR §§164.530(b), 164.530(e), and 164.308(a)(5). Assessment tool HIPAA Evidence Binder Checklist Free HIPAA evidence binder checklist for small clinics. 7-section structure with filename conventions, retention matrix, and a 2-hour setup guide. Assessment tool HIPAA Gap Analysis Scorecard Free HIPAA gap analysis scorecard. All eight administrative safeguards, physical and technical safeguards with yes/no questions, weighted scoring, and. Assessment tool HIPAA Incident Classification Tree Free HIPAA incident classification decision tree. Security vs. privacy, breach vs. near-miss, the 4-factor test, breach exceptions, and notification timelines. Template HIPAA Incident Response Plan Template Free HIPAA incident response plan template built around §164.308(a)(6). Includes breach risk assessment, notification guide, and documentation log. Assessment tool HIPAA Incident Triage Worksheet Free HIPAA incident triage worksheet for medical clinics. Covers initial intake, 4-factor breach risk assessment, escalation, and evidence documentation. Assessment tool HIPAA Medical Billing Compliance Checklist HIPAA medical billing compliance checklist. TPO disclosures, BAAs, minimum necessary, patient statements, denial workflows, offshore billing rules. Assessment tool HIPAA Medical Records Retention Schedule Free medical records retention schedule by state. Adult records, minor records, mental health records, and HIPAA documentation periods in one table. Download. Assessment tool HIPAA Minimum Necessary Decision Log Free HIPAA minimum necessary decision log for small clinics. Template with pre-filled examples for 5 clinical roles covering access decisions and justification. Quick reference HIPAA New Hire Checklist Free HIPAA new hire onboarding checklist for medical clinics. 10 concrete steps covering training, access provisioning, BAA review, and PHI handling sign-off. Quick reference HIPAA New Practice Startup Checklist HIPAA startup checklist for new clinics. 60 items across pre-opening, 30, 60, and 90 days. BAA, NPP, risk analysis, training. Assessment tool HIPAA Offboarding Checklist Free HIPAA offboarding checklist for medical clinics. Same-day ePHI access revocation, device retrieval, and final attestation template for staff separations. Assessment tool HIPAA Patient Records Request Log HIPAA patient records request log template. Track § 164.524 requests, 30-day deadlines, fees, and denials. Aligned to OCR Right of Access enforcement. Assessment tool HIPAA Physical Security Audit Checklist Free HIPAA physical security audit checklist. Covers facility access, workstation, device, visitor, and disposal controls under 45 CFR 164.310. Assessment tool HIPAA PM Tool Comparison Guide Free HIPAA PM tool comparison guide for clinics. Compare BAA posture, pricing, audit trail, workflow fit, and implementation risk. Assessment tool HIPAA Policy Review Calendar Free HIPAA policy review calendar for small clinics. 12-month schedule for reviewing Security Rule policies with owner assignments and attestation tracking. Quick reference HIPAA Privacy Policy Template Free HIPAA privacy policy template for clinics. Covers 45 CFR §164.530: workforce training, sanctions, and complaint procedures. Download now. Quick reference HIPAA Remote Work & BYOD Policy Template Free HIPAA remote work and BYOD policy template for clinics. Covers eligible roles, device config, MFA, VPN, lost devices, and access termination. Assessment tool HIPAA Risk Analysis Worksheet Free HIPAA risk analysis template for small medical clinics. NIST SP 800-66 methodology. Satisfies 45 CFR §164.308(a)(1)(ii)(A). Download the worksheet. Assessment tool HIPAA Risk Remediation Tracker Free HIPAA risk remediation tracker template. Turn risk analysis findings into tracked tasks with owner, due date, risk level, and evidence columns. OCR... Assessment tool HIPAA Role Access Matrix Free HIPAA role access matrix template for small clinics. Six default roles with per-system permission levels, review date fields, and minimum necessary docs. Quick reference HIPAA Security Policy Template Free HIPAA security policy template for clinics. Covers all three safeguard categories under 45 CFR §§164.308–316. Download and customize for your practice. Assessment tool HIPAA Social Media Policy Template Free HIPAA social media policy template for medical clinics. Covers PHI prohibitions, photo consent, comment response rules, and sanctions. 45 CFR §164.502. Template HIPAA Software Comparison Scorecard Free HIPAA compliance software comparison scorecard. Weighted scoring matrix across 7 dimensions with 5 tool columns. Make an objective vendor decision. Quick reference HIPAA Staff Training Quiz Template Free HIPAA staff training quiz template. 20 questions, answer key with citations, scoring rubric, and documentation instructions for small clinics. Assessment tool HIPAA State Law Compliance Checklist Free HIPAA state law compliance checklist for 10 states: breach deadlines, consent rules, mental health protections, and AG contacts. Download the PDF. Assessment tool HIPAA State-Law Overlay Matrix Free HIPAA state law overlay matrix comparing federal HIPAA with CA CMIA, TX HB 300, and NY SHIELD Act. Training, breach notification, and patient rights. Assessment tool HIPAA Tabletop Exercise Script Free HIPAA tabletop exercise script for small clinics. Three realistic incident scenarios, facilitator guide, participant roles, and after-action template. Assessment tool HIPAA Task Management Maturity Scorecard Free HIPAA compliance maturity scorecard for small clinics. Score 6 dimensions across 5 maturity levels to identify your biggest compliance gaps. Assessment tool HIPAA Texting Policy Template Free HIPAA texting and secure messaging policy template. Approved platforms, prohibited apps, SMS consent, and retention rules under 45 CFR 164.312(e). Assessment tool HIPAA Vendor Security Questionnaire Free HIPAA vendor security questionnaire. 30 questions covering BAA terms, SOC 2, subprocessors, encryption, access controls, and incident response. Download. Assessment tool HIPAA Workforce Sanctions Log Template Free HIPAA workforce sanctions log template. Structured fields, severity rubric, and 6-year retention guidance per 45 CFR § 164.530(e) and (j). Download. Quick reference HIPAA-Compliant Marketing Checklist for Clinics HIPAA marketing checklist for clinics. Authorization rules, testimonials, tracking pixels, social media, email lists. 45 CFR 164.508 aligned. Template Multi-Location HIPAA Rollout Plan Free multi-location HIPAA compliance rollout plan. Site-by-site matrix, local owner designations, shared vs. site-specific tasks, and 12-week milestone tracker. Quick reference Notice of Privacy Practices Free Notice of Privacy Practices template for clinics. All required 45 CFR §164.520 elements. Plain language patients can read. Download and customize. Template OCR Inquiry Readiness Packet Free OCR inquiry readiness packet for small clinics. Evidence binder structure, 24-hour preservation checklist, response roles, and OCR document requests. Assessment tool PHI Disposal & Destruction Tracking Log Free PHI disposal log template for clinics. Track destruction date, method, witness, and vendor BAA. 45 CFR 164.310(d)(2) aligned. Quick reference PHI Workflow Audit Worksheet Free PHI workflow audit worksheet for small clinics. Map PHI flows across 5 workflows, identify access gaps, and document safeguards for your risk analysis. Quick reference Stark Law Self-Referral Checklist Free Stark Law self-referral checklist for physician-owned clinics. Identify ownership and compensation arrangements that require review. Includes key... Assessment tool Telehealth Compliance Workflow Checklist Free HIPAA telehealth compliance checklist for small clinics. Pre-session setup, platform BAA verification, consent, recording policy, and quarterly review. Assessment tool Vendor BAA Renewal Review Checklist Free HIPAA vendor BAA renewal checklist for small clinics. Covers subprocessor changes, AI feature coverage, security posture, incident history, and renewal.

Operational assurance

Use the template, then move the workflow into a system.

Templates help clarify the job. PHIGuard helps clinics run the recurring tasks, evidence, and accountability that follow.

BAA included Legal baseline available on every plan.
Audit history Compliance actions stay reviewable later.
No card upfront Start evaluation before billing setup.

No credit card required. Add billing details later if you want service to continue after the trial.