HIPAA Compliance Coverage: Gold vs Platinum
Patient trust depends on how well you protect patient information. PDX Information Technology Services (PDX IT) provides managed IT for healthcare practices across the Portland area, including medical clinics, counseling offices, dental practices and chiropractors. This page shows what our Gold and Platinum plans cover under the HIPAA Security Rule, with downloadable coverage worksheets for each plan.
We don’t promise to make your practice “HIPAA compliant” or “certified.” Compliance is shared work between your practice and its vendors. Our part is to deliver and maintain the IT safeguards the Security Rule expects, and to give you clear records of what is covered. For an overview of our healthcare support, see our HIPAA IT services in Portland.
Gold Coverage Worksheet (PDF)Platinum Coverage Worksheet (PDF)
Why Managed IT Matters for HIPAA
Small and mid-sized practices handle the same sensitive data as large health systems, usually without an in-house IT team. A managed service gives you steady, organized protection without the cost of hiring staff. Here is what our plans cover.
Risk Assessments
The Security Rule requires a risk analysis. We review your devices, accounts, network and data flows, then point out gaps and the steps to close them.
Access Controls and Multi-Factor Authentication (MFA)
Each staff member gets only the access their role requires. MFA on email and key systems blocks most password-based attacks.
Endpoint Detection and Response (EDR)
EDR watches workstations and servers for suspicious behavior and can isolate a threat before it spreads, which goes well beyond basic antivirus.
Automated Patching and Monitoring
Unpatched software is a common way attackers get in. We monitor your systems and apply updates on a schedule, so your devices stay current without interrupting patient care.
Dark Web Monitoring
We watch for staff credentials that show up in breach dumps and dark web marketplaces, so exposed passwords can be changed before anyone uses them.
After-Hours Support
Problems can come up outside office hours. Our after-hours support is offered on a best-effort basis to help you get back to work.
Backups and Recovery
Reliable backups support the contingency planning HIPAA expects. Platinum includes Microsoft 365 and computer backups. On Gold, backups are available as an add-on.
Business Associate Agreement (BAA)
We act as your business associate and sign a BAA. We share our BAA before you sign anything, so you can review it with your compliance lead or attorney.
Documentation for Audits
We keep records of the safeguards we manage, including access policies, patching, monitoring and backups. If an auditor, insurer or partner asks for this, you’ll have it ready.
Gold vs. Platinum: Choose the Right Plan
Both plans are built for managed IT for healthcare practices. Pricing is per user, per month.
| Feature | Gold | Platinum |
|---|---|---|
| Price (per user/month) | Starting at $125 | Starting at $225 |
| Setup fee | None | None |
| Free initial IT assessment | ✓ | ✓ |
| 90-day opt-out | ✓ | ✓ |
| After-hours support (best-effort) | ✓ | ✓ |
| Endpoint detection and response (EDR) | ✓ | ✓ |
| Dark web monitoring | ✓ | ✓ |
| Automated monitoring and patching | ✓ | ✓ |
| VoIP support | Included | Included |
| HIPAA-related support | ✓ | ✓ |
| INKY email protection | — | ✓ |
| Microsoft 365 backup | Add-on | ✓ |
| Computer backup | Add-on | ✓ |
| Microsoft 365 licensing | Billed separately | Billed separately |
Gold fits practices that want solid security and support at a lower monthly cost and may already have a backup plan in place.
Platinum fits practices that want stronger email protection against phishing, plus Microsoft 365 and computer backups, all in one plan.
Low-Risk Start
There’s no setup fee. Every engagement starts with a free initial IT assessment. With our 90-day opt-out, if the service isn’t right for you, you can cancel within the first 90 days with no penalties.
Download the HIPAA Coverage Worksheets
Our worksheets list which HIPAA Security Rule safeguards each plan covers and which ones stay with your practice, side by side. Use them to plan with your team or compliance advisor.
Gold HIPAA Coverage Worksheet (PDF)Platinum HIPAA Coverage Worksheet (PDF)
Frequently Asked Questions
Will PDX IT make my practice HIPAA compliant?
No IT provider can make a practice compliant alone. HIPAA also includes administrative policies, training and privacy practices that your organization owns. We help you meet the Security Rule’s technical safeguards and document that work.
Do you sign a Business Associate Agreement?
Yes. We share our BAA before you sign, so you can review the terms ahead of time.
What does the 90-day opt-out mean?
If you decide within the first 90 days that we’re not the right fit, you can cancel with no penalties.
Is Microsoft 365 included in the price?
No. Microsoft 365 licensing is billed separately. Platinum includes Microsoft 365 backup and INKY email protection.
Do you support our phone system?
Yes. VoIP support is included in both plans.
What happens during the free IT assessment?
We review your current devices, accounts, security tools and backups, then walk you through what we found and recommend a plan. There’s no cost and no obligation.
Schedule Your Free IT Assessment
Get a clear picture of where your practice stands on HIPAA safeguards. PDX IT serves healthcare practices throughout Portland, Tualatin and the surrounding area.
Call 971-331-4871 or request your free IT assessment online.
PDX Information Technology Services
8215 SW Tualatin-Sherwood Rd, Suite 200
Tualatin, OR 97062
Hours: Mon–Fri 7 AM–6 PM
Non-profits pay $100 and $180.