Nothing here yet.
2d ago · 6 min read · If you maintain HIPAA-covered systems, your Business Associate Agreement (BAA) inventory is one of the most under-engineered parts of your compliance posture. Most organizations carry it in a spreadsh
Join discussion5d ago · 6 min read · A 2026 engineering-perspective on the gap between "we passed SOC 2" and "we'd pass an OCR Risk Analysis Initiative inspection." The framing problem If you sell software into healthcare, you've probabl
Join discussionMay 20 · 4 min read · If you're standing up the HIPAA SRA-tool stack for a healthcare org in 2026, what does the buying decision actually look like from the engineering side? A lot of the writing on this lives in marketing
Join discussionMay 8 · 5 min read · The 2026 HIPAA Security Rule amendments tightened what an audit log has to look like. For telehealth platforms — where a single patient session can fan out to a half-dozen API calls touching PHI — get
Join discussion