$2M+
Annual HIPAA penalty cap
Civil penalties can exceed $2 million per violation category, per year, after inflation adjustments. An outdated risk analysis is one of the most common findings.
Read: risk analysis mistakes
ALL-IN-ONE HIPAA, OSHA, OIG and state rules in one workspace
Be audit-ready every day. Not just the week before.
Complydome brings HIPAA, OIG screening, staff training, vendor BAAs and state rules like Texas HB 300 into one guided workspace. Compliance experts set it up for you, and everything your team does rolls up into one compliance score you can act on.
- Concierge onboarding
- 60+ expert-reviewed policies
- No patient data required
871
Alignment score
Strong Alignment · of 1000
Needs your attention 2 open
HB 300 training · 2 new hiresDue in 6 daysDue soon
Renew BAA · Reference labExpires in 12 daysReview
Monthly OIG screening18 of 18 staff cleared todayDone
Illustrative product view with sample data
AWS HIPAA-eligible infrastructure
256-bit encryption in transit & at rest
BAA signed during onboarding
Role-based access & audit logging
Runs your program, not your patient data
Guidance and workflows across the rules you're held to
HIPAA Privacy RuleHIPAA Security RuleBreach Notification RuleHITECH ActOIG Exclusion ScreeningAnti-Kickback StatuteStark LawOSHACMS Conditions of ParticipationTexas HB 300Fraud, Waste & AbuseWorkplace Violence Prevention
Practicing in Texas? HB 300 is built in.
Texas goes beyond HIPAA. Complydome adds HB 300 policies and Texas-specific risk assessment questions, and tracks the 90-day new-hire training deadline, signed acknowledgments and the 15-day electronic records request window, so you never have to rely on memory. Need the training itself? Texas-specific courses are available through Koursebox, our sister company.
Why it matters
The rules didn't get simpler. Your team didn't get bigger.
Independent practices answer to the same federal and state rules as large health systems, usually without a compliance department. The practices that do well aren't working harder. They have a system.
Every claim
OIG exclusion exposure
Employing an excluded individual can trigger penalties and repayment for each item or service they touched. Screening once at hiring isn't enough.
Read: a $120k screening lesson$1.5M
Texas HB 300 annual cap
A pattern of privacy violations under Texas law can reach $1.5 million per year, on top of federal HIPAA exposure.
Read: HB 300 penalty tiersFigures summarize federal and Texas law as published in our research library. Educational information, not legal advice.
Without a system
- Policies in binders and shared drives no one can find
- Training tracked in a spreadsheet, if at all
- OIG checks done once at hiring, then forgotten
- A scramble every time an auditor calls
With Complydome
- One score that shows exactly where you stand
- Reminders before anything is due, with proof of completion
- Recurring OIG screening with documented results
- Timestamped proof of every signature, screening and change
The compliance score
Everything you do adds up to one score.
Every workflow, policy, training record and screening in Complydome has a status. Run an audit simulation and they come together into one score from 0 to 1000, plus a dated report you can share with leadership. Every task your team completes moves the score.
Compliance workflows42 of 46 complete
Policies, procedures & forms23 published
Employee acknowledgments96% signed
Training1 overdue
OIG screeningAll clear
Annual risk assessment72% complete
Audit simulationScore and report in one click
Significant Gaps0–499
Moderate Alignment500–749
Strong Alignment750–899
Exceptional Posture900–1000
Your score reflects the work your practice completes, so we don’t promise any particular level. We show you exactly what moves it.
Safeguard Posture Assessment
HIPAA Administrative Safeguards Alignment Review & Point-in-Time Security Scoring
Assessment prepared for
Riverside Family Practice
An advisory tool for internal posture management. Not legal advice, and not a guarantee of regulatory compliance.
Reviewing bodyComplydome Advisory ServicesReport typeSample report
Sample report with illustrative data
The platform
Your entire compliance program. One calm place.
Everything an auditor might ask for, organized, current and provable. Built so the person who runs compliance at your practice can do it in minutes a week, not days a month.
Every requirement becomes a workflow with a clear status.
Complydome turns HIPAA, OSHA, OIG and state rules into recurring workflows. Each one arrives on schedule with step-by-step instructions, and its status feeds your compliance score the moment the work is done.
- Recurring tasks with deadlines, dependencies and priority levels
- Step-by-step instructions and short video guides for every task
- Sign-off that records who completed each task, and when
- A live score for each regulation, measured against its target
Every policy comes with its procedure and forms, versioned together.
Start from 60+ policies reviewed by a healthcare compliance expert and tailored to the regulations your practice must follow, such as Texas HB 300. Each one includes the procedure your team follows and the forms they use, and every change is versioned.
- Policy, procedure and forms kept together, tailored to your practice and state
- Version history with a summary of every change, for policies and procedures
- Employee acknowledgments with due dates, recorded with date, time and IP address
- Core documents in one place: Notice of Privacy Practices, Code of Conduct, BAAs and more
Every employee and vendor, cleared and current.
One roster for your staff and your business associates. Complydome watches the dates and the lists that are easy to miss.
- OIG exclusion screening against the federal list, matched by name, NPI and date of birth, with every result saved
- License and certification tracking with expiration alerts
- Vendor agreements and BAAs with renewal dates and signed copies on file
- Internal audit records with findings and outcomes
Training assigned, completed and proven.
Assign training to employees and vendors with clear deadlines. Upload certificates from courses you already use, or add Koursebox courses in a few clicks.
- Training bundles by role, with due dates and overdue alerts
- Bring your own training and keep the certificates as evidence
- Optional Koursebox courses with exams, passing scores and resume-where-you-left-off
- Certificates with a verifiable number, filed automatically
Your annual risk assessment, guided question by question.
The HIPAA Security Rule expects a documented risk analysis. Complydome walks you through it with plain-language explanations and citations, then keeps every year’s approved assessment on file.
- A structured question bank with built-in guidance and regulatory references
- Progress saved by section, so you can finish over several sittings
- Texas practices also get HB 300 questions and results
- Flag answers and add notes for follow-up
- Formal approval, with a record for every year
When something happens, respond with confidence.
A misdirected fax or a lost laptop shouldn’t become a crisis. Log it, work through it and keep the proof regulators expect.
- Incident reports with severity, root cause and mitigation steps
- Breach determination, with a record of every notice sent: who, how and when
- Device inventory with encryption status, assigned user and lost or stolen tracking
Illustrative product views with sample data
Optional add-on · From our sister company
Koursebox training marketplace, built into Complydome
Bring your own training, or give your team role-based healthcare compliance courses without leaving Complydome. Practical scenarios, knowledge checks and completion certificates, including Texas-specific content.
- Privacy & HIPAA
- OSHA & workplace safety
- Cybersecurity & AI governance
- Ethics & governance
- Clinical & operational risk
Audit-grade evidence
When an auditor asks, you’ll have the proof.
Compliance isn’t only doing the work. It’s proving you did it. Complydome records the evidence as you go, so there’s nothing to reconstruct later.
Timestamped acknowledgments
Every employee policy acknowledgment is recorded with the date, time and IP address it came from.
A complete history
Every policy version, screening result, certificate and breach notice is kept, so you can show your record for any date.
Records that can’t be quietly changed
Every change is logged with who made it, when and from where, and sealed so it can’t be edited after the fact.
Roles & access
Bring everyone in. Decide exactly what each person sees.
Create as many roles as your practice needs, for employees, compliance consultants, vendors and even your auditor. For each role, you choose what they can view and what they can change.
- Unlimited custom roles, set up your way
- View or change permissions for every feature
- Give an auditor view-only access instead of emailing files
Example roleAccess
Compliance officerRuns the programFull access
Compliance consultantOutside expert helping your teamEdit workflowsEdit policiesView score
EmployeesYour staffSign policiesTake training
VendorsBusiness associatesTake assigned training
AuditorExternal reviewerView policiesView evidenceView score
Your account is protected too. Two-factor authentication, automatic lockout after repeated failed sign-ins, a full record of every role and permission change, and alerts by email, text and in-app.
How it works
Live in days, not months. We do the heavy lifting.
No do-it-yourself software project. A concierge team sets everything up with you, then Complydome keeps it running.
1Kickoff
We learn your practice
Locations, roles, vendors and the states you operate in. One conversation, no homework.
2Concierge setup
We build your program
Our experts configure your workspace, tailor policies, migrate what you already have and set up access for your team.
3Activation
Your team gets moving
Staff receive training, acknowledgments and screening workflows. Reminders are handled for you.
4Always ready
Stay audit-ready
Run an audit simulation anytime, see your score update as workflows are completed, and get alerts before anything is due.
Who it's for
Sized for your practice. Ready for your growth.
Enterprise compliance software was built for corporate legal departments. Complydome was built for the practice down the street, and scales all the way up to health systems that need their own dedicated environment.
A complete program, without a compliance department
Get the policies, training, screening and documentation a larger organization would have, set up for you and kept current.
Consistent standards as you grow
One standard for policies, training and oversight, with unlimited custom roles so every manager, consultant and auditor sees exactly what they need.
Your own dedicated, isolated environment
An isolated environment built for your organization, with single sign-on, your workforce data loaded for you and a dedicated account manager. Live in 45–90 days.
Primary careDentalBehavioral healthPhysical therapyChiropracticDermatology & med spaPediatricsSpecialty clinicsLabs & imagingHome health
Why Complydome
Enterprise-grade compliance. Without the enterprise overhead.
| Capability | Complydome | Enterprise GRC suites | Consultants & spreadsheets |
|---|---|---|---|
| Built for independent healthcare practices | Yes | Built for large legal and HR teams | Varies by consultant |
| Time to go live | Days, with concierge setup | Often months of implementation | Ongoing manual effort |
| One compliance score with audit simulation | 0–1000 score + report | Varies | No |
| Healthcare policies included | 60+ expert-reviewed | Often sold separately | Billed by the hour |
| Proof ready for auditors | Timestamped, unalterable records | Varies | Scattered files |
| Pricing | Published: $500/mo, billed annually | Custom quotes | Hourly or retainer |
Comparison reflects general market categories, not any specific vendor.
Research & resources
Backed by research you can read today.
Our team publishes plain-English breakdowns of the regulations healthcare practices are held to, each tied to the exact citation. It's free, it's public and it's the same knowledge that powers the platform.
580+Published analyses
10+Regulatory domains
FreeOpen to every practice
Built by compliance architects and auditors
Secure healthcare infrastructure expertise, paired with hands-on regulatory audit experience.
Pricing
Simple, published pricing. No surprises.
The same platform we build for hospitals in their own isolated environments, sized and priced for your practice.
PRO
For independent practices and growing groups
$500/ month
Billed annually at $6,000 per year
- Concierge setup: onboarding and personalized expert guidance
- Audit simulation & score: a 0–1000 score and a report you can share
- Policies & workflows: 60+ state-matched policies with procedures, forms and employee acknowledgments
- People & vendors: OIG screening, licenses, certifications, BAAs and training tracking
- Risk & incidents: annual risk assessment, incident and breach records, device inventory
- Access & support: unlimited custom roles, ticket support, alerts and the research library
Cancel anytime. You keep access through the end of your paid year.
Enterprise · Single-Tenant
For hospitals and health systems with hundreds to a few thousand employees
Custom
Implementation project plus monthly service
- Everything in PRO, plus:
- Your own isolated environment: a dedicated AWS environment with production and non-production
- Single sign-on: connected to your identity provider
- Workforce data import: we map and load your employee data from your HR systems
- Live in 45–90 days, with on-site discovery and a dedicated implementation team
- Account manager, hotline and production support, backed by a contractual uptime SLA
- BAA signed at onboarding
- Concierge onboarding
- Expert compliance guidance
- U.S. data hosting
- Your data stays yours
Optional add-on: Koursebox staff training at $25 per seat, per course, billed separately from your plan. Prefer your own training? Bring it. Complydome tracks it either way.
FAQ
Frequently asked questions
Does Complydome replace my attorney or compliance officer?
No. Complydome is a technology platform that organizes, tracks and guides your compliance program. It supports the person responsible for compliance at your practice, whether that's a dedicated officer or a practice manager wearing several hats. It doesn't provide legal advice, and we recommend qualified counsel for legal questions about your situation.
Does Complydome access our patient data?
No. Complydome orchestrates your compliance program: policies, training, OIG screening, vendor agreements, assessments and the evidence an auditor will ask for. It isn't an EHR and isn't built to store patient records. As an added safeguard, we still sign a Business Associate Agreement with every practice during onboarding. The compliance information you do store is yours, hosted on AWS HIPAA-eligible infrastructure in the United States and encrypted in transit and at rest.
How long does setup take?
Days, not months. Our concierge team learns how your practice runs, configures your workspace, tailors your policies and migrates what you already have. Your team doesn't have to run a software project.
How is the compliance score calculated?
Your score reflects the status of your compliance workflows, policies, employee acknowledgments, training, screenings and risk assessment. Run an audit simulation and Complydome scores your safeguard alignment from 0 to 1000 and produces a dated Safeguard Posture Assessment. Scores fall into four levels: Significant Gaps (0–499), Moderate Alignment (500–749), Strong Alignment (750–899) and Exceptional Posture (900–1000). Your score depends on the work your practice completes, so we don’t promise a specific result. It’s a point-in-time advisory tool for managing your program, not legal advice or a guarantee of regulatory compliance.
Can our consultant or auditor get access?
Yes. You can create as many roles as you need, for employees, compliance consultants, vendors and auditors, and choose exactly what each role can view and change. For example, you can give an auditor view-only access to your policies, evidence and score instead of emailing documents back and forth.
Do you support Texas HB 300?
Yes. Texas practices get HB 300 policies and Texas-specific risk assessment questions and results, plus tracking for the 90-day new-hire privacy training deadline with signed acknowledgments and the 15-day window for electronic health record requests, alongside federal HIPAA.
Is staff training included?
Complydome tracks all of your staff training, whether you bring your own courses or use Koursebox, the training marketplace from our sister company that's built into the platform. Koursebox courses are optional and billed separately, per seat and per course. Complydome customers pay $25 per seat instead of the standard price of up to $50.
How does billing work?
Plans are billed annually in advance. You can cancel at any time: you keep full access through the end of the year you paid for, and your plan won't renew. Unused months aren't refunded. See our Terms of Service for details.
IVIRA
EARLY ACCESS
What’s next: an AI navigator for your team.
We’re building Eivira to connect everyday work to the exact state and federal requirement behind it and suggest the next step. It’s in early access today, and it will always support your compliance lead, never replace them.
- Designed to cite the regulation behind every suggestion
- Your team approves every action. Nothing happens on its own.
- Runs on isolated AWS models, with no patient records and no training of general AI on your data.
EEivira activityRiverside Family PracticePreview
Preview of planned activity, for illustration. Available to early-access practices.
Your next audit is already on someone's calendar. Be ready for it.
Get a walkthrough tailored to your practice and your state, plus a free gap review that shows exactly where you stand today.
We respond within 24 hours · (832) 510-7647