HIPAA Compliance Pricing: Flat Plans From $675 a Year
One Guy Consulting publishes its HIPAA compliance pricing in full: a flat annual rate per organization, with no usage charges, per-seat fees, or hidden costs.
I know what you may be thinking: “Sure, Chuck, that’s what everyone says.” Fair point. So rather than simply asking you to take my word for it, let me show you exactly how One Guy Consulting delivers on that promise.
There are only two plans One Guy Consulting offers. One is called the ‘Self-Guided’ plan, while the other is called the ‘Full-Scope’ plan.
Are you a seasoned compliance professional seeking a better, more automated tool to manage HIPAA? The Self-Guided plan is what you are looking for. At its core, this plan suits folks who do not necessarily need Chuck’s direct help and prefer to use the platform independently at a lower price.
- Security Risk Assessment
- Automated Gap Analysis
- Automated Construction of Remediation Plans
- Automated Policy and Procedure Templates
- Staff Training & Progress Tracking
- Technical, Physical, and Administrative Audits
- Vendor Management with Automated Contract Execution
- Incident Management System
There are three ways to pay for the Self-Guided plan. Those three are monthly, annually, or by purchasing two years upfront. Monthly pricing for the Self-Guided plan is $60 a month. Annual pricing for the Self-Guided Plan is $675 a year. You could also lock in two years upfront for the deepest discount on the Self-Guided Plan for $1,175 per 24 months.
Are you a 5-person healthcare office without domain expertise in HIPAA compliance who does not know where to start? The Full-Scope plan is what you are looking for. This is because you are typically already wearing 10 hats and putting on an 11th just isn’t feasible. That’s where One Guy Consulting comes in and also why Full-Scope is our most popular plan.
The Full-Scope Plan includes everything found in the Self-Guided Plan, Plus:
- Four Hours of One-on-One Consulting Each Month
- Personalized Implementation
- Incident Response Guidance
- CMS Audit Response Support
- RFP Assistance
There are three ways to pay for the Full-Scope plan. Those three are monthly, annually, or by purchasing two years upfront. Monthly pricing for the Full-Scope plan is $120 a month. Annual pricing for the Full-Scope Plan is $1,300 a year. You could also lock in two years upfront for the deepest discount on the Full-Scope Plan for $2,300 per 24 months.
Compare HIPAA Compliance Plans
For the visual learners out there, I’ve compiled this chart to further explain our two tiers of HIPAA compliance pricing:
| Included Service | Self-Guided Plan | Full-Scope Plan |
|---|---|---|
| Security Risk Assessment | ✓ | ✓ |
| Automated Gap Analysis | ✓ | ✓ |
| Automated Remediation Plans | ✓ | ✓ |
| Policy and Procedure Templates | ✓ | ✓ |
| Staff Training and Tracking | ✓ | ✓ |
| Administrative, Physical, and Technical Audits | ✓ | ✓ |
| Vendor Management and Automated Contract Execution | ✓ | ✓ |
| Incident Management System | ✓ | ✓ |
| Four Hours With Chuck Monthly | - | ✓ |
| Personalized Implementation | - | ✓ |
| Incident Response Guidance | - | ✓ |
| CMS Audit Response Support ¹ | - | ✓ |
| RFP Assistance | - | ✓ |
| Monthly Pricing | $60/Mo. | $120/Mo. |
| Annual Pricing | $675/Year | $1,300/Year |
| Two-Year Pricing | $1,175/24 Mos. | $2,300/24 Mos. |
¹ CMS Audit Response Support: If your organization is audited by CMS, One Guy Consulting will assist with responding to document requests and providing available evidence of the compliance work your organization completed within the One Guy Consulting platform. Your organization must have made a good-faith effort to achieve compliance and accurately documented that work. This service does not include legal advice or legal representation. Chuck Weiselberg is not an attorney.
Payment terms: Annual and two-year plans are prepaid in full and cover the entire selected term. Monthly plans are billed each month and may be canceled at any time. One Guy Consulting does not require a separate long-term service contract.
Upgrades/Downgrades: Please contact us if you want to make changes to your plan.
And that’s it! There’s not much more to explain because our job is to prevent things from being overly complicated.
The prices listed above cover one physical location. If your organization operates multiple locations, please contact One Guy Consulting for a customized quote.
If you still have questions regarding the pricing here at One Guy Consulting, please feel welcome to email us or schedule a meeting with Chuck to discuss further. It is always my pleasure to help out!
HIPAA Compliance Pricing FAQs
No separate long-term service contract is required. Monthly plans may be canceled at any time. Annual and two-year plans are prepaid and remain active for the purchased term.
One Guy Consulting only has 2 plans to choose from to keep things nice and simple. One is called the Self-Guided plan, while the other is called the Full-Scope plan.
We have three ways in which you can choose the Self-Guided plan. Choose Self-Guided monthly at $60 per month. Choose Self-Guided annual at $675. Last, choose two-year pricing for Self-Guided at $1,175 every 24 mos.
We have three ways in which you can choose the Full-Scope plan. Choose Full-Scope monthly at $120 per month. Choose Full-Scope annual at $1,300. Last, choose two-year pricing for Full-Scope at $2,300 every 24 mos.
No, never. One Guy Consulting values honest and straightforward pricing. With our flat-fee pricing, what is promised is what you get. Always.
Excellent question! One Guy Consulting is just that; One Guy - Me, Chuck Weiselberg. That being the case, I am able to keep overhead low and pass the savings on to you.
What HIPAA Compliance Actually Requires
Every covered entity and business associate must satisfy five core obligations under the HIPAA Privacy and Security Rules (45 CFR Parts 160 and 164):
- Security Risk Assessment (SRA). An accurate, thorough analysis of risks to electronic PHI, required by 45 CFR 164.308(a)(1)(ii)(A). It is the single most common deficiency cited in OCR enforcement actions.
- Written policies and procedures. Reasonable and appropriate policies, kept in writing and tailored to your operations, per 45 CFR 164.316(a). Generic templates alone do not satisfy this.
- Workforce training. Security awareness and training for every workforce member, documented with dates, per 45 CFR 164.308(a)(5)(i).
- Business associate agreements. A signed BAA with every vendor that creates, receives, maintains, or transmits PHI on your behalf, per 45 CFR 164.308(b)(1).
- Technical safeguards. Access controls, audit controls, integrity controls, authentication, and transmission security, per 45 CFR 164.312.
Compliance documentation must be retained for six years from creation or the date it was last in effect, per 45 CFR 164.316(b)(2). One Guy Consulting produces each of these outputs so they would hold up under OCR review.