Healthcare compliance, done right and done faster

A spreadsheet captures answers but not the structure auditors expect: regulatory citations, threat-and-vulnerability scoring, evidence linkage, a tracked remediation plan, and an audit trail of who changed what and when. Prusik Health builds all of that as you work, so the output is a defensible assessment, not a static file that goes stale the moment you close it.

Most teams complete a first formal Security Rule assessment in days rather than weeks. Guided questions, built-in control libraries, and cross-framework mapping mean you answer once and reuse it everywhere, and you can assign sections across your team and track progress as you go.

Yes. It is included with every plan, and the platform enforces it: evidence uploads and assessment answers stay blocked until you sign and we countersign — or, for customers who accepted our BAA before 2026-07-29, until that recorded acceptance is on file. Sign ours in the app, route it to your own signatory, or upload your own paper for us to countersign, as soon as your account is active.

Tenants are isolated by organization-scoped queries enforced in the application; data is encrypted with AES-256 at rest and TLS 1.3 in transit; sessions are server-side and revocable; and every action is written to a tamper-evident, six-year audit log. AI runs under a BAA with our model provider on a zero-retention basis: most features send only aggregate counts and labels; two kinds of content may contain PHI and do reach the model — the contents of evidence files you upload, and free text you or your staff type (assessment notes, an incident description, a finding, a question you ask) — and both go to that BAA-covered, zero-retention model, which is instructed never to reproduce them. See the security page for the full posture.

Ryland, our AI compliance guide, is included on the paid plans (Premium and Advanced) and is not part of the free tier. Everything else is on every plan, including free: unlimited users, every register and report, PDF and CSV exports, the API, SSO, and employee HIPAA training. What the paid plans add is Ryland plus more room to work — more assessments, locations, ePHI systems and frameworks.

There is a free plan, and it is the trial — permanent, no credit card, no countdown. It includes one full HIPAA Security Rule assessment a year (45 CFR 164.302-318, not the Privacy or Breach Notification Rules), one location and one ePHI system, and you can finalize the assessment and export everything, which is the whole deliverable. Upgrade whenever you are ready: the paid plans add Ryland, our AI compliance guide, and lift the scope limits — more assessments, more locations and ePHI systems, the HIPAA Privacy and Breach Rules, and frameworks beyond HIPAA. If a paid plan later lapses you drop back to free rather than losing access, keeping every record.