---
title: "Patient records kept protected"
description: "Patient records in one protected place, plus BAA agreements. See who opened a record and when. $168 per seat a month on an annual contract, $186 monthly."
locale: en
canonical: https://finleadgen.com/en/services/hipaa-compliance
source: https://finleadgen.com/en/services/hipaa-compliance.md
price_reviewed: 2026-08-06
---

# Patient records kept protected

Health data kept apart and kept watched.

**$168 per seat per month on an annual agreement · $186 month to month.**

## Where do patient records sit today, besides the practice software?

In email, in a shared folder, in the thread with the lab and on the front desk phone. That suits everyone until someone asks who exactly opened a record last Tuesday. Answering that takes more than a day.

## You can see who opened a record and when

Records move to a place where every login has a name: reception sees the schedule, the clinician sees the record, accounting sees the invoice. Who opened a record and when stays visible on any later day — you will not have to piece that answer together.

Email and exchanges with labs, insurers and contractors move to a protected channel. With everyone who touches your data we sign a data protection agreement — ourselves included.

Phones and computers used to open records are encrypted and kept under watch: a lost front desk phone stops being an incident you have to report to anyone.

## What record protection includes

| What | State | Price |
| --- | --- | --- |
| Everyone gets their own login and role: who sees what in the records | included |  |
| Who opened which record and when — all visible | included |  |
| Protected email and exchange with labs and insurers | included |  |
| Encryption and management of the devices used to open records | included |  |
| Data protection agreements with contractors, us included | included |  |
| Written policies, staff training and incident reviews | included |  |
| An annual risk assessment and a plan to close it out | included |  |
| Licences for practice and record-keeping software — at the vendor's invoice | paid to the vendor |  |

## Your price

| Plan | Price | Note |
| --- | --- | --- |
| Record protection on top of your IT | +$40 per seat a month | If we already look after your computers. |
| The whole seat, protection included | $168 per seat a month | Support, security and record protection on one invoice. Monthly — $186. |
**Record protection on top of your IT**
- Roles, protected exchange, BAA agreements and a login history
**The whole seat, protection included**
- Full support for the computer and round-the-clock watch
- Roles, protected exchange, BAA agreements and a login history

## Extras

| What | State | Price |
| --- | --- | --- |
| We watch for attacks around the clock | not included | $18 per endpoint a month |
| Backups and a check that they actually restore | not included | $1,340 a year |
| If you are breached, we investigate — monthly | not included | $670 a month |
| Questionnaires your client has sent | not included | $1,350 per questionnaire |
| Security director | not included | from $2,500 a month |
| Call answering at the clinic by a voice agent | not included | from $269 per location |
| Preparing for a cyber policy renewal | not included | $2,250 one-off |
| Employee computers looked after | not included | from $102 per seat |

### There are six of us in a dental practice. Isn't this for big clinics?

No. The law looks at the data, not at headcount: the duty is the same for a practice of six and one of six hundred. The invoice, though, is counted per seat, so six people pay ten times less than sixty.

### We already have practice software for patients. Isn't that enough?

No. The software stores the records but answers for nothing around them: email, shared folders, phones, USB sticks, the access of a receptionist who has left. That is what you get asked about, not the software itself. And we leave the software alone.

### Do you sign a data protection agreement?

Yes. We sign one ourselves and put the same agreements in place with everyone else who touches your data: the lab, billing, the cloud provider, the hardware contractor. We keep the list of those agreements and keep it current.

### What do you show if the data does leak?

The record login history, the written policies, the training and the risk assessment — those four are asked for first. They are gathered in advance and ready, and the notification deadlines sit in the action plan for that day.

## Where to send the quote

Tell us the number of seats and the software you keep records in.