Calm pricing for a stressful topic.
Free triage and self-check forever. Annual subscriptions for the full library and a 4-hour incident-response SLA on the Retainer tier.
Less than the fine for a 5-record breach with no documentation.
Get started →| What's included | Free | Practice | + Retainer |
|---|---|---|---|
| Triage tool | |||
| HIPAA self-check | |||
| Phase 1 playbooks (4 available now) | |||
| Phase 2 playbooks (8 — included in Practice subscription) | — | ||
| Regulatory grid updates | — | ||
| Annual SRA checklist | — | ||
| BAA at signing | — | ||
| Annual tabletop exercise | — | — | |
| Priority incident response | — | — | 4-hr SLA |
| Insurer questionnaire help | — | — | |
| Named point of contact | — | — |
Multi-location practices: location 2 at 60% of base rate, locations 3+ at 50%. Volume break begins at 3 sites.
Pricing FAQ
Does the free tier require a login?+
No. The triage tool and the HIPAA self-check are use-without-signing-in by design. Nothing you click on either page leaves your device.
What is a BAA and why does it matter?+
A Business Associate Agreement is a contract required under HIPAA between a covered entity (your practice) and any vendor that handles PHI on your behalf. Without a signed BAA, sharing PHI with the vendor is itself a HIPAA violation. We include a current BAA at signing on the paid tiers.
Is pricing under most state single-quote thresholds?+
Yes — pricing is designed to fall under the single-vendor-quote thresholds most Medicare-billing practices operate against, so procurement is straightforward.
Can I pay monthly?+
Yes, on the Practice tier ($59/month). The Retainer tier is annual only because it includes a tabletop exercise and a named contact.
What if I'm in an active incident — can I upgrade right now?+
Yes. Same-day upgrades from Free to Practice or Retainer are routine. Email hello@medical.hackfirstaid.com or use the contact form — we respond within one business hour during US Eastern business hours.