TTechMSJ·Oct 21HIPAA Compliance Checklist for Healthcare Websites: Forms, Scheduling, Analytics, and Security.. Learn how to protect PHI on healthcare websites with practical guidance for analytics, web forms, scheduling integrations, and security.9 min read·hipaacompliantwebsitedesign.hashnode.dev
RRetailbox Automation·Oct 21HIPAA compliant CRM: which CRMs sign a BAA, on which plan?Salesforce, HubSpot, monday.com, Zoho, HighLevel, Pipedrive and more, checked against each vendor's own pages16 min read·retailboxautomation.hashnode.dev11S
RRetailbox Automation·Oct 19HIPAA compliant automation: which tools sign a BAA?Zapier, Make, n8n, HubSpot, monday.com, Zoho, HighLevel and Pipedrive, checked against each vendor's own pages15 min read·retailboxautomation.hashnode.dev1
AAlex·Sep 24How to Design a Snowflake Data Warehouse for HealthcareDesigning a Snowflake data warehouse for healthcare requires early decisions about PHI, tokenization, schema design, and identity resolution.11 min read·this-shitty-outsourcing.hashnode.dev
MMike Buzz·Sep 16How to Evaluate a HIPAA-Compliant Telehealth Platform in 2026Learn how to evaluate a HIPAA-compliant telehealth platform for PHI handling, BAAs, patient access, staff handoffs, auditability, and security.10 min read·buzz-skyscape.hashnode.dev
AAlex·Sep 11How to Review a Vibe-Coded Healthcare App Before ProductionA checklist for reviewing vibe-coded healthcare apps before they handle PHI, authorization, secrets, LLM tools, webhooks, backups, and EHR integration9 min read·this-shitty-outsourcing.hashnode.dev
JJoe Gellatly·Aug 31If You're a Healthcare Vendor, a Signed BAA Is the Start of Your HIPAA Job, Not the EndIf your company handles protected health information for healthcare clients, you are a business associate, and your clients are starting to ask a harder question than "will you sign a BAA?" They want4 min read·medcurity.hashnode.dev
JJoe Gellatly·Aug 4SOC 2 Is Not HIPAA: Choosing Between Horizontal GRC and Healthcare-Native SRASOC 2 Is Not HIPAA: Choosing Between Horizontal GRC and Healthcare-Native SRA There is a conversation happening in health-tech companies and healthcare organizations everywhere right now, and it usual6 min read·medcurity.hashnode.dev
CComplySaaS·Aug 1How to Build a SaaS Compliance Evidence Register Before PHI Enters the WorkflowA practical data model for tracking BAA scope, SOC 2 evidence, subprocessors, retention, and recheck triggers.7 min read·complysaas.hashnode.dev
JJoe Gellatly·Jul 29A Hospital HIPAA Risk Analysis Is Not an Evidence Scan: Why 45 CFR 164.310 Requires Someone OnsiteA HIPAA Security Risk Analysis and automated compliance-evidence monitoring are different deliverables, and a hospital should know which one it is buying. The risk analysis is required of every covere4 min read·medcurity.hashnode.dev
