HIPAA Agent
hipaaagent.ai
· Sentinel Health Compliance, LLC
HIPAA compliance officer for US healthcare practices. 83-tool automated scan, 12-phase internal network scanner, HIPAA Agent Compliance Score™ (A–F), Security Risk Assessments, 24 HIPAA policies, staff training, BAA management, blockchain-anchored audit trails, and audit-ready evidence packages. Zero-PHI architecture. May 2026 Security Rule ready. Free compliance check at hipaaagent.ai/check or book a consultation at cal.com/hipaa-agent/hipaa-compliance-review — (916) 476-7689.
hipaaagent.ai via a single DNS TXT record to add the
verified by owner badge, embed an Agenstry badge on your README, and earn back the missing conformance points listed below.
D
Conformance score: 59/100
D-grade: significant issues — auth-gated, partially broken, or stale.
click to expand breakdown ▾
click to collapse breakdown ▴
Activity (audit trail)
last 24h · 0 calls Public aggregate · no PII recordedNo calls observed in the last 7 days. Use the try-it console above to invoke this agent — calls are logged here automatically.
Card history
1 snapshot Every change toagent-card.json
| Captured | Hash | |
|---|---|---|
| 2026-05-15 00:33:22 current | 8e5e23ed7701… |
view → |
Endpoints
| Agent card | https://hipaaagent.ai/.well-known/agent-card.json |
| Provider | https://hipaaagent.ai |
| Docs | https://hipaaagent.ai/developers |
Skills · 24 declared · mapped to canonical taxonomy
Full 83-tool compliance scan (73 network + 10 browser-verified). Returns HIPAA Agent Compliance Score™, findings with HIPAA citations, breach probability. Async…
Returns A–F grade and 0–100 compliance score for any US healthcare practice by NPI. 10-category breakdown. Instant if previously scanned.
Detailed findings from a completed scan with HIPAA Security Rule citations (45 CFR), fine exposure estimates, severity ratings, and remediation steps.
Generates a branded PDF risk posture report with cover page, findings, breach correlations, and remediation priorities. Async — returns job ID.
Compiles audit-ready evidence package with SHA-256 timestamped records and blockchain-anchored proof on Base L2.
$499 one-time. 22-page signed report with attestation page, audit response readiness, SHA-256 integrity hash.
Immutable audit trail of all compliance events. Filterable by action type and date range. SHA-256 verified.
HIPAA-required annual SRA per §164.308(a)(1)(ii)(A). Scan data auto-fills ~60% of 27 questions. $499 one-time.
Evaluates practice readiness for the updated HIPAA Security Rule effective May 2026. Tracks 13 mandatory requirements.
Generates all 24 required HIPAA policies as downloadable PDFs, customized to practice specialty, size, and state.
Assigns role-based HIPAA training modules. 6 modules with quizzes and completion certificates.
Generates HIPAA-compliant BAA for vendor relationships. Can auto-send for signature.
Cross-references practice against 1,045+ HHS OCR breach records. Returns matching breaches with dates, affected individuals, and breach type.
Grade trends, new findings, policy status, training completion, BAA expirations, and breach correlations.
Recent healthcare-specific threat intelligence from CISA, HHS HC3, FBI, MS-ISAC sources.
HIPAA Safe Harbor 18-identifier text redaction per 45 CFR 164.514(b). Free unlimited use.
Scans text for HIPAA 18 identifiers. Returns yes/no + identifier types detected. Free unlimited use.
Verified system-wide metrics with SHA-256 signature. Free, no auth required.
Scan coverage data per US state.
Performance metrics and trend data.
Verifies SHA-256 audit hash against Base L2 blockchain anchor. Free.
Current credit balance, usage, and tier. Free, no auth required.
Search CMS NPPES registry for US healthcare providers by NPI, name, specialty, city, or state.
Schedule a free 30-minute HIPAA compliance review. Returns booking link, phone, email.
Health · last 20 probes
Cheaper or better alternatives per-skill
For each canonical skill this agent serves, the cheapest priced competitor and the highest-quality competitor — only shown when at least one beats the current agent. Skills where this agent is already best on both axes are hidden.
Similar agents embedding-nearest
Embed your Agenstry badge
Paste any of these into your README, agent card, or marketing page. Each badge auto-updates and links back to this page.
Markdown / HTML snippets
[](https://agenstry.com/agents/hipaaagent.ai) [](https://agenstry.com/agents/hipaaagent.ai) [](https://agenstry.com/agents/hipaaagent.ai) [](https://agenstry.com/agents/hipaaagent.ai)
Audit-grade evidence bundle
JSON snapshot for vendor-review files. Add ?sign=true for a JWS-signed envelope verifiable against
our JWKS. See the methodology.
Raw agent card JSON
{
"name": "HIPAA Agent",
"description": "HIPAA compliance officer for US healthcare practices. 83-tool automated scan, 12-phase internal network scanner, HIPAA Agent Compliance Score\u2122 (A\u2013F), Security Risk Assessments, 24 HIPAA policies, staff training, BAA management, blockchain-anchored audit trails, and audit-ready evidence packages. Zero-PHI architecture. May 2026 Security Rule ready. Free compliance check at hipaaagent.ai/check or book a consultation at cal.com/hipaa-agent/hipaa-compliance-review \u2014 (916) 476-7689.",
"url": "https://hipaaagent.ai/api/a2a",
"documentationUrl": "https://hipaaagent.ai/developers",
"iconUrl": "https://hipaaagent.ai/icon.png",
"termsOfService": "https://hipaaagent.ai/legal/terms",
"privacyPolicy": "https://hipaaagent.ai/legal/privacy",
"provider": {
"organization": "Sentinel Health Compliance, LLC",
"url": "https://hipaaagent.ai",
"email": "compliance@hipaaagent.ai",
"phone": "+19164767689"
},
"version": "1.0.0",
"capabilities": {
"streaming": false,
"pushNotifications": false,
"stateTransitionHistory": false
},
"authentication": {
"schemes": [
"apiKey"
],
"credentials": {
"apiKey": {
"location": "header",
"name": "X-API-Key"
}
}
},
"defaultInputModes": [
"application/json"
],
"defaultOutputModes": [
"application/json",
"application/pdf"
],
"skills": [
{
"id": "hipaa_scan",
"name": "HIPAA Compliance Scan",
"description": "Full 83-tool compliance scan (73 network + 10 browser-verified). Returns HIPAA Agent Compliance Score\u2122, findings with HIPAA citations, breach probability. Async \u2014 2\u20135 minutes.",
"tags": [
"scanning",
"compliance",
"healthcare",
"hipaa"
],
"examples": [
"Run a HIPAA scan on NPI 1234567893",
"Scan exampleclinic.com for HIPAA compliance issues"
]
},
{
"id": "hipaa_grade",
"name": "HIPAA Agent Compliance Score\u2122",
"description": "Returns A\u2013F grade and 0\u2013100 compliance score for any US healthcare practice by NPI. 10-category breakdown. Instant if previously scanned.",
"tags": [
"compliance",
"scoring",
"healthcare",
"hipaa"
],
"examples": [
"What is the HIPAA Agent Compliance Score for NPI 1234567893?",
"Grade this dental practice on HIPAA compliance"
]
},
{
"id": "hipaa_findings",
"name": "Compliance Findings",
"description": "Detailed findings from a completed scan with HIPAA Security Rule citations (45 CFR), fine exposure estimates, severity ratings, and remediation steps.",
"tags": [
"findings",
"compliance",
"remediation",
"hipaa"
],
"examples": [
"Show findings for NPI 1234567893",
"What HIPAA violations were found in the last scan?"
]
},
{
"id": "hipaa_report",
"name": "PDF Compliance Report",
"description": "Generates a branded PDF risk posture report with cover page, findings, breach correlations, and remediation priorities. Async \u2014 returns job ID.",
"tags": [
"report",
"pdf",
"compliance",
"hipaa"
],
"examples": [
"Generate a PDF compliance report for NPI 1234567893",
"Create a risk posture report for this practice"
]
},
{
"id": "hipaa_evidence",
"name": "Audit Evidence Package",
"description": "Compiles audit-ready evidence package with SHA-256 timestamped records and blockchain-anchored proof on Base L2.",
"tags": [
"evidence",
"audit",
"blockchain",
"hipaa"
],
"examples": [
"Generate an evidence package for NPI 1234567893",
"Prepare audit documentation for our practice"
]
},
{
"id": "hipaa_audit_report",
"name": "HIPAA Audit & Attestation Report",
"description": "$499 one-time. 22-page signed report with attestation page, audit response readiness, SHA-256 integrity hash.",
"tags": [
"audit",
"attestation",
"report",
"hipaa"
],
"examples": [
"Generate an audit attestation report for NPI 1234567893",
"Create a 22-page signed audit report for this practice"
]
},
{
"id": "hipaa_audit_ledger",
"name": "Audit Event Ledger",
"description": "Immutable audit trail of all compliance events. Filterable by action type and date range. SHA-256 verified.",
"tags": [
"audit",
"ledger",
"compliance",
"hipaa"
],
"examples": [
"Show the audit ledger for NPI 1234567893",
"List all compliance events for this practice in the last 90 days"
]
},
{
"id": "hipaa_sra",
"name": "Security Risk Assessment",
"description": "HIPAA-required annual SRA per \u00a7164.308(a)(1)(ii)(A). Scan data auto-fills ~60% of 27 questions. $499 one-time.",
"tags": [
"sra",
"risk-assessment",
"compliance",
"hipaa"
],
"examples": [
"Start an SRA for NPI 1234567893",
"Generate a Security Risk Assessment for my dental practice"
]
},
{
"id": "hipaa_may2026",
"name": "May 2026 Readiness Assessment",
"description": "Evaluates practice readiness for the updated HIPAA Security Rule effective May 2026. Tracks 13 mandatory requirements.",
"tags": [
"may2026",
"compliance",
"readiness",
"hipaa"
],
"examples": [
"Is NPI 1234567893 ready for the May 2026 HIPAA rule?",
"Check May 2026 compliance readiness for this practice"
]
},
{
"id": "hipaa_policies",
"name": "HIPAA Policy Generator",
"description": "Generates all 24 required HIPAA policies as downloadable PDFs, customized to practice specialty, size, and state.",
"tags": [
"policies",
"documents",
"compliance",
"hipaa"
],
"examples": [
"Generate HIPAA policies for a 5-person dental practice in California",
"Create customized HIPAA policy documents for NPI 1234567893"
]
},
{
"id": "hipaa_training",
"name": "Staff HIPAA Training",
"description": "Assigns role-based HIPAA training modules. 6 modules with quizzes and completion certificates.",
"tags": [
"training",
"staff",
"compliance",
"hipaa"
],
"examples": [
"Set up HIPAA training for 3 employees at NPI 1234567893",
"Assign training modules to our front desk and clinical staff"
]
},
{
"id": "hipaa_baa",
"name": "Business Associate Agreement",
"description": "Generates HIPAA-compliant BAA for vendor relationships. Can auto-send for signature.",
"tags": [
"baa",
"vendor",
"compliance",
"hipaa"
],
"examples": [
"Generate a BAA for our EHR vendor relationship",
"Create a Business Associate Agreement for NPI 1234567893"
]
},
{
"id": "hipaa_breach_check",
"name": "HHS Breach Database Check",
"description": "Cross-references practice against 1,045+ HHS OCR breach records. Returns matching breaches with dates, affected individuals, and breach type.",
"tags": [
"breach",
"history",
"compliance",
"hipaa"
],
"examples": [
"Has NPI 1234567893 appeared in any HHS breach reports?",
"Check breach history for this dental practice"
]
},
{
"id": "hipaa_intelligence",
"name": "Compliance Intelligence Briefing",
"description": "Grade trends, new findings, policy status, training completion, BAA expirations, and breach correlations.",
"tags": [
"intelligence",
"briefing",
"compliance",
"hipaa"
],
"examples": [
"Give me a compliance intelligence briefing for NPI 1234567893",
"What are the compliance trends for this practice?"
]
},
{
"id": "hipaa_threat_intel",
"name": "Healthcare Threat Intelligence",
"description": "Recent healthcare-specific threat intelligence from CISA, HHS HC3, FBI, MS-ISAC sources.",
"tags": [
"threat",
"intelligence",
"security",
"hipaa"
],
"examples": [
"What are the latest healthcare cyber threats?",
"Show recent CISA and HHS HC3 advisories for healthcare"
]
},
{
"id": "hipaa_deidentify",
"name": "PHI De-identification",
"description": "HIPAA Safe Harbor 18-identifier text redaction per 45 CFR 164.514(b). Free unlimited use.",
"tags": [
"deidentification",
"phi",
"privacy",
"hipaa"
],
"examples": [
"Remove PHI from this clinical note",
"Redact patient identifiers from this text"
]
},
{
"id": "hipaa_phi_check",
"name": "PHI Detection",
"description": "Scans text for HIPAA 18 identifiers. Returns yes/no + identifier types detected. Free unlimited use.",
"tags": [
"phi",
"detection",
"privacy",
"hipaa"
],
"examples": [
"Does this text contain PHI?",
"Check for HIPAA identifiers in this document"
]
},
{
"id": "hipaa_reputation",
"name": "System Reputation Stats",
"description": "Verified system-wide metrics with SHA-256 signature. Free, no auth required.",
"tags": [
"reputation",
"stats",
"platform"
],
"examples": [
"Show HIPAA Agent system reputation stats",
"How many practices has HIPAA Agent scanned?"
]
},
{
"id": "hipaa_state_coverage",
"name": "State Coverage Map",
"description": "Scan coverage data per US state.",
"tags": [
"coverage",
"states",
"platform"
],
"examples": [
"Show scan coverage for California",
"Which states have the most scanned practices?"
]
},
{
"id": "hipaa_model_insights",
"name": "Platform Performance Insights",
"description": "Performance metrics and trend data.",
"tags": [
"insights",
"platform",
"metrics"
],
"examples": [
"Show platform performance insights",
"What are the scan success rates this month?"
]
},
{
"id": "hipaa_blockchain_verify",
"name": "Blockchain Audit Verification",
"description": "Verifies SHA-256 audit hash against Base L2 blockchain anchor. Free.",
"tags": [
"blockchain",
"verification",
"audit",
"hipaa"
],
"examples": [
"Verify this audit evidence hash",
"Confirm blockchain timestamp for evidence package"
]
},
{
"id": "hipaa_billing_balance",
"name": "API Credit Balance",
"description": "Current credit balance, usage, and tier. Free, no auth required.",
"tags": [
"billing",
"credits",
"api"
],
"examples": [
"What's my API credit balance?",
"How many credits have I used this month?"
]
},
{
"id": "npi_lookup",
"name": "NPI Registry Search",
"description": "Search CMS NPPES registry for US healthcare providers by NPI, name, specialty, city, or state.",
"tags": [
"npi",
"registry",
"lookup",
"healthcare"
],
"examples": [
"Look up NPI 1234567893 in the NPPES registry",
"Find cardiologists in Sacramento, CA"
]
},
{
"id": "book_consultation",
"name": "Book Free Compliance Consultation",
"description": "Schedule a free 30-minute HIPAA compliance review. Returns booking link, phone, email.",
"tags": [
"consultation",
"booking",
"support"
],
"examples": [
"Book a free HIPAA compliance consultation",
"Schedule a call to review our compliance posture"
]
}
],
"mcp_server": {
"url": "https://mcp.hipaaagent.ai/mcp",
"transport": "streamable-http",
"tools": 36,
"authentication": {
"type": "apiKey",
"header": "X-API-Key",
"free_tier": {
"credits": 500,
"signup": "https://hipaaagent.ai/developers"
}
}
},
"pricing": {
"currency": "USD",
"payment_method": "PayPal invoice",
"booking_required": "All paid plans require a consultation first",
"booking_url": "https://cal.com/hipaa-agent/hipaa-compliance-review",
"products": [
{
"name": "Free Compliance Check",
"price_usd": 0,
"billing": "free",
"description": "83-tool scan + HIPAA Agent Compliance Score\u2122 + 30-min consultation",
"url": "https://hipaaagent.ai/check"
},
{
"name": "HIPAA Audit & Attestation Report",
"price_usd": 499,
"billing": "one-time",
"description": "22-page signed report with attestation page, audit response readiness, SHA-256 integrity hash"
},
{
"name": "Security Risk Assessment (SRA)",
"price_usd": 499,
"billing": "one-time",
"description": "Annual SRA per \u00a7164.308(a)(1)(ii)(A). 27-question guided assessment, scan data auto-fills ~60%"
},
{
"name": "Concierge HIPAA Compliance",
"price_usd_monthly": 299,
"price_usd_annual": 3588,
"billing": "annually",
"description": "$299/mo billed annually = $3,588/year. Full managed compliance: monthly scans, SRA, 24 policies, staff training, BAA tracking, evidence packages, unlimited audit reports"
},
{
"name": "HIPAA Remediation Services",
"price_range_usd": "997-2497",
"billing": "one-time",
"description": "Hands-on remediation when human fixes are needed beyond agent capabilities. Vulnerability fixes, policy implementation, staff training delivery"
}
],
"msp_tiers": [
{
"name": "MSP 10+ practices",
"price_usd_per_practice_monthly": 179,
"minimum_practices": 10
},
{
"name": "MSP 25+ practices",
"price_usd_per_practice_monthly": 129,
"minimum_practices": 25
},
{
"name": "MSP 50+ practices",
"price_usd_per_practice_monthly": 99,
"minimum_practices": 50
}
],
"api_pricing": {
"free_tier": true,
"free_credits": 500,
"credit_packs": [
{
"name": "Credit Pack Small",
"price_usd": 99,
"credits": 5000
},
{
"name": "Credit Pack Medium",
"price_usd": 499,
"credits": 25000
},
{
"name": "Credit Pack Large",
"price_usd": 1999,
"credits": 100000
},
{
"name": "Annual API",
"price_usd": 5000,
"type": "annual_minimum"
}
],
"per_call": {
"hipaa_grade": "$25",
"hipaa_scan": "$150",
"hipaa_sra": "$500"
}
}
},
"contact": {
"founder": "Farhad Khawar",
"booking": "https://cal.com/hipaa-agent/hipaa-compliance-review",
"support": "compliance@hipaaagent.ai"
}
}