Six documents from our HIPAA toolkit, free. These are the core documents everything else is built on: two complete and two as previews of the opening pages, plus a working record and a full security risk assessment from the same set.

What you’ll receive

DocumentWhat it is for
HIPAA Notice of Privacy PracticesThe notice patients receive explaining how their protected health information may be used and disclosed, and their rights (45 CFR 164.520).
HIPAA Minimum Necessary Use and Disclosure PolicyHow uses, disclosures and requests for PHI are limited to the minimum necessary (45 CFR 164.502(b) and 164.514(d)).
HIPAA Security Policy Manual (preview: first 5 of 41 pages)The HIPAA Security Rule policy set: administrative, physical and technical safeguards in one manual.
HIPAA Patient Right of Access Policy and Procedure (preview: first 5 of 15 pages)How requests to access and obtain copies of PHI are received, verified and answered within the required timeframe (45 CFR 164.524).
HIPAA Security Assessment Checklist Small OfficeA right-sized security assessment for a small practice or office, supporting readiness for an OCR audit or investigation.
HIPAA Security Risk AssessmentA complete security risk analysis for the Security Rule (45 CFR 164.308(a)(1)(ii)(A)): instructions, a risk rating scale and a checklist across the administrative, physical and technical safeguards, with a risk level and remediation action for each gap.

Where these fit in HIPAA

The set covers both rules: the Security Policy Manual, the security risk assessment and the small-office security checklist on the Security Rule side; the Notice of Privacy Practices, the minimum necessary policy and the right of access procedure on the Privacy Rule side.

Get the six HIPAA templates

Enter your email and confirm it, and the six documents arrive as one ZIP plus six separate PDFs. Links stay live for 14 days. No sales call, no card details.


We send one confirmation email first — double opt-in, no exceptions. Download links stay live for 14 days. See our privacy policy.

The rest of the toolkit

These five are a slice of the HIPAA Documentation Toolkit, which carries the full documented system — policies, procedures, registers and records — in editable Word and Excel format. See the contents list and sample pages on the product page.

Free templates for other frameworks