Fixed-price HIPAA risk assessments, phishing audits and fix-it roadmaps for practices in Somers, NY.
You already guard your patients’ and clients’ privacy. We look at the front door and the back door, explain what we find in words you’d use at the front desk, and send one invoice.
The same pair of eyes reads your first answer and signs your last page
Your assessor
One person, start to last page
Janus Gate is a small practice in Somers. Every engagement has a single lead assessor, so you explain your setup once and never to a stranger who has to be briefed.
Findings come in the words you’d use at the front desk. If the work grows beyond the scope letter, we ask you first.
What’s in the folder
What lands in your inbox when we’re done
Not a 90-page binder nobody opens. A short folder, in order, built so the next person to join your practice can understand it.
Document one
The risk assessment report
Every system that touches patient or client records, rated low, medium or high, with the reason in one sentence.
Plain-English summary on page one
Findings ranked, with no scare words
Signed and dated for your files
Law firms get the same folder, measured against client-confidentiality duties and the NY SHIELD Act.
Session
The 40-minute staff briefing
Everyone in one sitting. No slides full of acronyms. Bring coffee.
A checklist you can tick yourself, with the date and the initials.
Document two
Phishing results, kindly
Nobody is named on the report. We show the pattern, not the person who clicked.
Document three
Starter policies
Two-page versions of the policies you actually need: passwords, a lost laptop, and who to call when something looks wrong.
Written for a team of five or fifty
Yours to edit and keep
Questions about what’s in the folder? Write to us. A person replies on weekdays.
Most trouble at a small practice starts in the front-desk inbox, not in a movie hacker’s basement.
How we think about every engagement
01
Who shares a loginAnd who still has one after they’ve left.
02
The backupWe watch it restore, not just trust the green tick.
03
Email rulesHidden forwarding is the quiet one.
04
Old laptops and phonesWhere charts and client files quietly wander.
05
The waiting-room Wi-FiWhether guests and your practice share it.
06
The paper sideSign-in sheets, the fax machine, the shredder.
How it runs
From first call to final page
Five stops, in this order. You always know which one you’re at and what comes next.
1
Twenty minutes on the phone
We ask how many people work with you, how many locations, and where the records live. You hang up knowing whether we’re a fit.
Free
2
A one-page scope letter
What we’ll look at, how long it takes and the exact price. Sign it, or don’t.
Fixed price
3
We look, and we listen
Two to four days of fieldwork spread over about two weeks, remote where possible and in your office where it helps. Short conversations with the front desk, the billing person and whoever fixes the printer.
Weeks 1–2
4
The report, in plain words
Page one says what’s fine, what’s urgent and what can wait.
12 business days
5
A walk-through, then one invoice
We go through it together on a call. Then a single invoice for the price in the letter, and nothing else.
Done
The scope letter is free, and so is the first call. Choose a time that suits your front desk.
The honest answers to the worries behind the questions
Does this give us the HIPAA risk analysis we’re supposed to have?
The assessment produces a written, signed and dated risk analysis for your files. You still own the decisions in it, and the roadmap helps you act on them.
Are you going to “hack” us?
No. The phishing audit sends harmless test emails, and we agree on the details in the scope letter first. Nothing is touched that you haven’t approved in writing.
Will we be pushed to buy software?
The roadmap lists fixes with rough costs and who could do them. You choose the vendor, and we bill only for the engagement.
We’re a law firm, not a clinic. Is this for us?
Yes. We use the same method and measure it against your client-confidentiality duties and the NY SHIELD Act instead of HIPAA.
What if something has already gone wrong?
Call us anyway: (914) 815-2945. We aren’t an emergency-response firm, but we’ll tell you honestly who to phone first and what to write down while you wait.
Free first call
Start with twenty minutes on the phone
No pitch deck, no pressure. Tell us about your practice and we’ll tell you honestly what, if anything, you need.