You can delegate tasks. You cannot delegate responsibility. If your name is on the practice, you own the email, fax, and form story even if a consultant set up the Wi-Fi.
A program you can finish in two weeks
- List every way PHI leaves the office.
- Kill the unofficial ones (personal Gmail, hallway fax, consumer forms).
- Sign a BAA with the remaining vendor.
- Give each staff member a named account.
- Train once on the real buttons, then file the attendance sheet.
Why we built a practice-sized stack
HIPAA Companion exists because physician offices were stitching consumer email, a fax.com account, and a form builder, then hoping the BAAs matched. Email, fax, and personalized forms under one agreement is the product. The consult and training session are how you turn it on without a 40-page questionnaire.
Revisit the list when you add a location or a telehealth line. Programs rot when the office grows and the inventory does not.