Made to order · Founding pricing · Built on HHS guidance
The HIPAA forms every private-practice therapist actually needs, in one place
If you run a therapy practice, you are almost certainly a HIPAA covered entity, and that means a stack of required paperwork most graduate programs never taught you. HIPAA Binder builds all of it to order: order now at founding pricing and we generate every document from your practice details, delivered within 30 days with a full refund anytime before then. You only enter your practice details, never any client information.
What is inside the binder?
A private-practice therapist is generally responsible for all of the following. Miss one and it tends to surface at the worst moment, an OCR complaint, an insurance audit, or a client records request you cannot fulfill.
Notice of Privacy Practices
The document you must give every client and post in your office and on your website. Updated for the current reproductive-health and Part 2 disclosure language.
45 CFR 164.520
Business Associate Agreements
Required with every vendor that touches client data, your EHR, billing, scheduling, email, cloud storage, even your AI notetaker. Most therapists are missing at least one.
45 CFR 164.502(e)
Security Risk Analysis
The single most-cited deficiency in OCR enforcement. It is required, it is annual, and it must be documented.
45 CFR 164.308(a)(1)(ii)(A)
Privacy & Security Policies
Your written rulebook covering access, minimum-necessary use, workforce sanctions, and how you respond to an incident.
Privacy & Security Rules
Patient-rights & authorization forms
Access, amendment, accounting of disclosures, and release forms, including the heightened protection HIPAA gives psychotherapy notes, which generic templates get wrong.
45 CFR 164.508(a)(2)
Breach procedure & Privacy Officer docs
A breach-notification procedure and log, plus the Privacy/Security Officer designation. Yes, in a solo practice, that is you, and you need it on paper.
Breach Notification Rule
Why not just use the free HHS templates?
You can, and we cite them. But the free model documents are written for hospitals and every covered entity at once. They do not speak to a solo or group therapy practice, they do not include the other documents above, and they do not update themselves when the rules change. You are not paying us for a file you could find. You are paying for it customized to a therapy practice, complete, and kept current.
Am I even a covered entity?
If you transmit any health information electronically in connection with a billing or insurance transaction, yes. Cash-only practices that never bill electronically may not be, and we will tell you that up front rather than sell you something you do not need.
Take the 2-minute compliance checkWhat is the best HIPAA compliance option for therapists?
It depends on your size, and the honest answer is that none of these three is right for everyone. A free generator is enough if a privacy notice is genuinely all you need. A subscription platform earns its price once you have coordination problems. In between sits the case we built for.
| What you need | A free template or generatore.g. NPP Generator | A compliance platforme.g. Compliancy Group, Accountable | HIPAA Binder |
|---|---|---|---|
| What you pay | Free, or a one-time fee for a single document | Recurring subscription, commonly in the low hundreds of dollars a month | One-time, with an optional annual refresh |
| How many of the required documents you get | Usually one, most often the Notice of Privacy Practices | The full set, generated inside the platform | The full set, written to your practice and state |
| Whether policies cite the rule that requires them | Rarely | Varies by platform | Every policy, so you can check it against the regulation |
| Built for your profession and state | Generic by design | Templated, with some profession presets | Made to order for both |
| What happens if you stop paying | You keep the file | Access typically ends with the subscription | You keep everything |
| Who it genuinely suits better | A practice that only needs a privacy notice and nothing else | Larger organisations with real coordination problems: distributing policies to dozens of staff, tracking training completions, managing long vendor lists | A solo or small practice that needs the documents proportionate to its size |
We sell the third column, so read the first two with that in mind. The detailed vendor-by-vendor comparisons are on NPP Generator and compliance software, including when each is the better buy.
Lock in founding pricing
Every document is made to order at locked-in founding pricing, built from your practice details and delivered within 30 days, with a full refund anytime before then. Each binder is built by hand, so founding pricing is limited to the first 25 practices; after that the Complete Binder is $249. Preview any document free before you decide.
Opening a dental office? HIPAA + OSHA Binder Bundle: $299 $328 separately
Add the OSHA binder: exposure control plan, hazard communication, sharps and training documentation, every policy citing the regulation that requires it.
Founding price · $449 after the first 25 practices
Your documents are built to order and delivered within 30 days, with a full refund anytime before delivery. The subscription then keeps every document current as HIPAA rules change and reminds you when your annual risk assessment is due. Cancel anytime.
Questions therapists ask
See exactly what you are missing, free
Enter your email and we will send a preview of the therapist binder, so you can judge the quality before you pay a cent.