HIPAA BinderGet my forms

Made to order · Founding pricing · Built on HHS guidance

The HIPAA forms every private-practice therapist actually needs, in one place

If you run a therapy practice, you are almost certainly a HIPAA covered entity, and that means a stack of required paperwork most graduate programs never taught you. HIPAA Binder builds all of it to order: order now at founding pricing and we generate every document from your practice details, delivered within 30 days with a full refund anytime before then. You only enter your practice details, never any client information.

Or see a sample, or jump to the documents and pricing.

What is inside the binder

A private-practice therapist is generally responsible for all of the following. Miss one and it tends to surface at the worst moment, an OCR complaint, an insurance audit, or a client records request you cannot fulfill.

Notice of Privacy Practices

The document you must give every client and post in your office and on your website. Updated for the current reproductive-health and Part 2 disclosure language.

45 CFR 164.520

Business Associate Agreements

Required with every vendor that touches client data, your EHR, billing, scheduling, email, cloud storage, even your AI notetaker. Most therapists are missing at least one.

45 CFR 164.502(e)

Security Risk Analysis

The single most-cited deficiency in OCR enforcement. It is required, it is annual, and it must be documented.

45 CFR 164.308(a)(1)(ii)(A)

Privacy & Security Policies

Your written rulebook covering access, minimum-necessary use, workforce sanctions, and how you respond to an incident.

Privacy & Security Rules

Patient-rights & authorization forms

Access, amendment, accounting of disclosures, and release forms, including the heightened protection HIPAA gives psychotherapy notes, which generic templates get wrong.

45 CFR 164.508(a)(2)

Breach procedure & Privacy Officer docs

A breach-notification procedure and log, plus the Privacy/Security Officer designation. Yes, in a solo practice, that is you, and you need it on paper.

Breach Notification Rule

Why not just use the free HHS templates?

You can, and we cite them. But the free model documents are written for hospitals and every covered entity at once. They do not speak to a solo or group therapy practice, they do not include the other documents above, and they do not update themselves when the rules change. You are not paying us for a file you could find. You are paying for it customized to a therapy practice, complete, and kept current.

Am I even a covered entity?

If you transmit any health information electronically in connection with a billing or insurance transaction, yes. Cash-only practices that never bill electronically may not be, and we will tell you that up front rather than sell you something you do not need.

Take the 2-minute compliance check
Made to order · Founding pricing: first 25 practices

Lock in founding pricing

Every document is made to order at locked-in founding pricing, built from your practice details and delivered within 30 days, with a full refund anytime before then. Each binder is built by hand, so founding pricing is limited to the first 25 practices; after that the Complete Binder is $249. Preview any document free before you decide.

Single document
$49one-time

Founding price · $79 after the first 25 practices

Just the one document you need, built for your practice.
Choose your document

Instant: answer a short wizard, watch your document fill in live, and unlock the files for the same $49.

  • Built for your practice: profession, state, and billing setup shape every clause
  • Every policy cites the regulation that requires it
  • Editable Word + annotated PDF
  • See your finished notice before you pay
  • Instant download after checkout
The Complete Binder
Most complete
$129one-time

Founding price · $249 after the first 25 practices

Every HIPAA document a private practice needs, in one place.
  • Notice of Privacy Practices (current rules)
  • Covered-entity determination for your billing setup
  • BAA template + filled vendor table for your actual stack
  • Security Risk Analysis workbook + full policy set
  • Breach procedure: federal + your state's statute
  • Print-ready patient forms, annotated PDF, editable Word
  • Free revisions for 30 days after delivery
Binder + Always-Current
Stays current
$129+ $99/yr after 30 days

Founding price · $249 after the first 25 practices

The full binder, plus an annual refresh that keeps it current.
  • Everything in the Complete Binder
  • When a cited rule changes, we update the affected documents and send them to you
  • Every update comes with a note: what changed, why, and the citation
  • Annual refresh: every citation in your binder re-verified
  • Annual risk-assessment and training reminders
  • BAA tracker for your vendors
  • First year of updates starts 30 days after your order
  • Cancel anytime, the binder is yours

Opening a dental office? HIPAA + OSHA Binder Bundle: $299 $328 separately

Add the OSHA binder: exposure control plan, hazard communication, sharps and training documentation, every policy citing the regulation that requires it.

Founding price · $449 after the first 25 practices

Order both binders

Your documents are built to order and delivered within 30 days, with a full refund anytime before delivery. The subscription then keeps every document current as HIPAA rules change and reminds you when your annual risk assessment is due. Cancel anytime.

Questions therapists ask

See exactly what you are missing, free

Enter your email and we will send a preview of the therapist binder, so you can judge the quality before you pay a cent.