Website and HIPAA compliance for wellness clinics
We check your clinic's website for tracking pixels, accessibility problems and missing privacy notices, fix what we find, and monitor it every month. We also set up the HIPAA documentation your practice needs.
Meta Pixel loads on the online booking pageBooking activity may be shared with an ad platform
Contact form sends data to a vendor with no BAA on fileForm submissions can include health details
14 images are missing alt textScreen readers can't describe them to visitors
Text contrast is below WCAG 2.1 AA on 6 pagesHard to read for people with low vision
Privacy policy was last updated in 2019Doesn't reflect current tools on the site
What we check
Most clinic websites are built by a marketing agency or the owner, and nobody is responsible for checking them for these issues. Healthcare providers have faced class action lawsuits over tracking tools on their websites, and medical practices are frequent targets of website accessibility lawsuits.
Tracking and patient privacy
We find advertising and analytics tools, such as the Meta Pixel and Google Analytics, that may send information about patients to third parties, along with forms that send data to vendors without a BAA.
Website accessibility
We test your site against WCAG 2.1 AA, the standard courts and HHS use, and fix problems like missing alt text, unlabeled forms and low-contrast text. We make the actual fixes to your site and do not use accessibility widgets.
HIPAA documentation
We complete your annual security risk analysis, write your policies and procedures, run staff training with signed attestations, and keep track of which vendors have signed BAAs.
How it works
-
We scan your site
We review every public page of your website and send you a report listing each issue and how serious it is. The scan is free.
-
We fix the issues
We work directly in your website platform, or with your web developer, to fix what we found. We also set up your HIPAA documents and staff training.
-
We monitor every month
We rescan your site regularly and alert you if anything new appears, such as a tracking tool added by a marketing vendor. You get a short report each month.
Pricing
Two monthly plans. Both start with a free scan so you can see what needs attention first.
Monitor
For clinics that want their website checked regularly and their basic HIPAA documents in place.
- Regular website scans with alerts
- Monthly status report
- HIPAA policy and procedure templates
- Staff HIPAA training with attestations
Protect
For clinics that want us to handle the fixes and the full HIPAA program.
- Everything in Monitor
- Fixes to your website as issues are found
- Annual HIPAA security risk analysis
- Vendor BAA tracking
- Priority support
A one-time setup fee covers the initial fixes and onboarding. We'll quote it after your free scan, since it depends on how much work your site needs. We also offer LegitScript certification support and full accessibility remediation as separate projects.
Who we are
Wellproof was started by a team that owns and operates integrative medicine clinics. We built these processes to manage compliance at our own practices, and now offer the same service to other clinics.
We work with independent wellness, integrative medicine, IV therapy, hormone and weight loss practices, and we understand how these clinics market and book patients.
Common questions
Can you guarantee my clinic is compliant?
No one can guarantee that a clinic will never receive a complaint or lawsuit. We find and fix the most common problems, document the work we've done, and keep monitoring your site, which lowers your risk and gives you a record of the steps you've taken.
Are you a law firm?
No. Wellproof is a compliance operations service and does not provide legal advice. If you need legal advice about a specific situation, we can refer you to a healthcare attorney.
Will you have access to patient information?
Our scans only look at the public pages of your website. We sign a Business Associate Agreement (BAA) with every client, and we only use your website logins to make the fixes we've agreed on.
Which website platforms do you work with?
We work with WordPress, Squarespace, Wix, Webflow and most other common platforms. If you have a web developer, we can also work through them.
What do I need to do to get started?
Send us your website address. We'll run the free scan and email you the report. If you decide to sign up, we'll send a short intake form about your practice and the vendors you use.
Get a free scan of your website
Tell us about your clinic and we'll email you a report of what we find. Please don't include any patient information.