For therapy practices
You run a therapy practice. You shouldn’t also have to run a security program.
For physical, occupational and speech therapy practices — from one clinic to a growing group.
What we hear
Sound familiar?
The owner is the security officer
In most practices, HIPAA security belongs to whoever owns the business or manages the office — on top of everything else.
Templates aren’t a program
A policy pack from years ago doesn’t show that accounts get closed, devices are encrypted or vendors are reviewed.
The asks keep coming
Insurers want MFA and backups, payers want attestations, and a breach at a vendor can stop your billing overnight.
Why it matters now
What’s different for you
Built by a therapy-practice founder
Griffin founded Therapitas and has spent 18 months as security officer for One Therapy Network and its clinics. We know what a therapy practice can realistically take on.
Evidence for what you’ve already promised
If you bill Medicare electronically or participate in Medicaid, you’ve likely already certified HIPAA compliance. We make that certification true — and provable.
How we help
Where to start
For providers & vendors
FreePolicy gap analysis
Send us the policies you have today. You get back a plain-English report of what’s missing against the HIPAA Security Rule.
- Works with whatever you have — a binder, a template pack, or nothing
- Each gap ranked by risk, with the fix spelled out
- Yours to keep, whether or not we work together
For providers
CoreSecurity officer program
A named HIPAA security officer backed by our engine. Your inventory, monitoring, monthly reviews and annual risk analysis — with evidence for every one.
- Automated asset inventory across devices, accounts and cloud systems
- Monthly access, device, vendor, log and policy reviews, drafted for you and signed by a person
- Annual risk analysis and an evidence locker kept for six years
- One short issue list — what to fix, in what order
For providers
Vendor risk, done for you
We track every business associate, collect their security evidence and BAAs, chase what’s missing, and flag what changes.
- A complete vendor and BAA inventory
- Annual reviews sent, chased and filed for you
- Vendor findings land on your issue list, not in an inbox
For providers & vendors
Trust site
A public security page backed by live evidence. Answer the next questionnaire with a link instead of a weekend.
- Shows the controls you actually run, not boilerplate
- Updates itself as your evidence changes
- Share sensitive documents only with approved requesters
Questions
Common questions
We’re small. Is this overkill?+
Start with the free gap analysis. Many small practices only need the essentials done consistently, and we’ll tell you honestly what that is.
Will this slow down our therapists?+
No. Most of the work happens in the background; your team sees short tasks, not a new system to learn.
Start with what you already have.
Send us your current policies and get a free gap analysis — or grab 30 minutes with Griffin to talk through where you stand.