Free Assessment Template

The HIPAA Data Residency Assessment Template

HIPAA does not require PHI to stay in the United States, and it does not permit ignoring where PHI goes either. The obligation is to know, assess, and contract for it. This template pack is the assessment that produces that answer: where PHI actually sits, who reaches it from where, and what you decided.

• A PHI location map covering every system, backup, and subprocessor
• An offshore access risk assessment for support and engineering reach-in
• A Business Associate and subcontractor register, kept current
• A residency decision worksheet that records the call and the reasoning