In short: Breach Secure Now HIPAA compliance helps organisations meet the core annual requirements of the US HIPAA rules. The HIPAA Breach Prevention Platform adds a HIPAA security risk assessment, privacy and security training, HIPAA policies and an employee vulnerability assessment to the standard platform. Client HIPAA Compliance provides the assessment, training and policies on their own. Both are licensed per user, monthly.
Why a UK organisation might need HIPAA
HIPAA is US law. It governs how US healthcare providers, health plans and clearing houses (covered entities) protect patient information, and it also applies to the businesses that handle that information for them, known as business associates. A UK company can be a business associate: a software supplier hosting US patient records, a transcription or medical coding service, a clinical research organisation or a support desk with access to a US clinic's systems.
If a US client has asked you to sign a business associate agreement, they will usually expect you to show a security risk assessment, staff privacy and security training, and written policies. Breach Secure Now's HIPAA products are designed to produce exactly that evidence. UK GDPR still applies to you in parallel; the two overlap but are not the same.
The two HIPAA options
| HIPAA Breach Prevention Platform | Client HIPAA Compliance | |
|---|---|---|
| HIPAA security risk assessment with remediation recommendations | Yes | Yes |
| Privacy and security training | Yes | Yes |
| Policies and procedures with e-signature | Yes | Yes |
| Weekly micro-training and phishing simulations | Yes | No |
| Dark web breach checks and employee portal | Yes | No |
| Employee vulnerability assessment (EVA MD) | Yes | No |
| Licensed by | User, monthly | User, monthly |
HIPAA Breach Prevention Platform is the full Breach Prevention Platform with the HIPAA elements added. Its employee vulnerability assessment, EVA MD, continuously analyses security metrics to highlight human risk, and includes personal dark web email scans alongside weekly training.
Client HIPAA Compliance is a standalone compliance service. It covers the assessment, training and policies, but has no continuous training elements or wider cyber security services.
How it is licensed
Both options are licensed per user and billed monthly through your Forever Systems account. Count the people who handle, or could access, protected health information; in a small firm that is often everyone. Prices depend on user numbers and the option you choose, so ask us for a quote.
Deployment and what to expect
- Scope: we confirm which staff, systems and US clients are in scope.
- Risk assessment: a guided security risk assessment identifies gaps and produces a remediation plan.
- Policies: HIPAA policies and procedures are tailored and sent to staff for electronic signature.
- Training: staff complete privacy and security training, with completion tracked for your records.
- Ongoing: on the HIPAA Breach Prevention Platform, weekly training and phishing simulations continue all year.
The platform is cloud-hosted, so nothing is installed on devices. As with the standard platform, simulated phishing needs allowlisting in your email system.
Important limits
There is no official HIPAA certification issued by the US government, and no product can make you compliant on its own. These services give you the core documents and records that clients and auditors ask for, but meeting HIPAA also depends on your technical controls, contracts and how you work. Take legal advice on whether HIPAA applies to you and on your business associate agreements.
How we help
We help you choose between the two options, run the risk assessment with you, manage policy sign-off and training reminders, and keep the records together for when a client asks. We can also help close the technical gaps the assessment finds, such as encryption, MFA and backup. Contact us for a quote.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Does HIPAA apply to UK companies?
It can. HIPAA applies to business associates of US covered entities, wherever they are based, if they create, receive, store or transmit protected health information on their behalf. Take legal advice on your own position.
What is the difference between the HIPAA Breach Prevention Platform and Client HIPAA Compliance?
Both include a HIPAA risk assessment, training and policies. The HIPAA Breach Prevention Platform adds weekly micro-training, phishing simulations, dark web checks and an employee vulnerability assessment.
Does Breach Secure Now certify us as HIPAA compliant?
No. There is no official HIPAA certification. The services provide the assessment, training and policy evidence that HIPAA expects, which you can show to clients.
How is it licensed?
Both HIPAA options are licensed per user and billed monthly.