Skip to main content
Home Care & Assisted Living

HIPAA compliance and IT support for Minnesota home care and assisted living

144A home care, 144G assisted living, and community residential settings. Same Security Rule, same Microsoft 365, same shortage of anyone who owns it.

Get a Free Consultation
Why this matters now

The problem, stated plainly

Staff turnover is a security control problem

Every hire and every departure is an access change. When offboarding is informal, former staff keep mailbox and file access long after their last shift. This is one of the most common findings in a real risk assessment.

Shared devices and standing admin rights

Most incidents we see in this sector trace back to a daily-use account holding local administrator rights. It is the single control that most often would have stopped the attack.

Nobody has run the assessment

The Security Rule requires a documented, current risk analysis. Not a checklist someone downloaded. A real assessment with findings, a remediation plan, and dates.

What's included

A single retainer covering the security officer role, the compliance work, and the day-to-day IT that makes it real.

  • Designated HIPAA Security Officer, named in writing
  • Annual Security Risk Assessment and remediation plan
  • Written Security Rule policies and workforce training
  • Business Associate Agreement review and tracking
  • Microsoft 365 and Exchange Online administration
  • Device management, endpoint protection, and patching
  • Onboarding and offboarding access control procedures
  • Incident response plan and on-call support
  • Helpdesk for your staff
Proof

We have done this work

We manage Microsoft 365, device security, and the HIPAA program for a licensed Minnesota assisted living provider, including the forensic response to a live remote-access compromise.

Questions we get

Straight answers on how this works.

We use an EHR vendor. Does that cover us?
No. Your EHR vendor is a business associate responsible for their own systems. Your staff devices, email, accounts, and access controls are yours, and that is where most of the Security Rule applies.
Do you work with providers who hold both a home care and a 245D license?
Yes. That is a common structure and our current client holds both.
Can you handle an incident if one happens?
Yes. We do forensic collection, evidence preservation, four-factor risk assessment, and coordination with your legal counsel on the breach notification determination.

Start with a free 30-minute gap check

Thirty minutes, your current posture against the Security Rule, and a written list of gaps you keep regardless of whether we work together.

Get in touch