HIPAA scoping questionnaire
Health Insurance Portability and Accountability Act
HIPAA protects sensitive patient health information. This questionnaire establishes whether you are a covered entity or a business associate, what ePHI you handle, and where the gaps in your safeguards are likely to sit.
What we ask
- Whether you are a Covered Entity, a Business Associate, or both
- What ePHI you store or process, and roughly how many records
- Whether Business Associate Agreements are in place across your vendors
Takes a few minutes. Scope only — no pricing or commercial information is requested. Partial answers are fine; you can send the rest later and they are added to the same record.
Prefer to talk it through first? Scoping calls are often faster than a form when the environment is complicated or the requirement came from a customer or regulator. Book a consultation or send us the details and we will scope it with you.

QSA Authorised
CEMEA · Asia Pacific · USA
Delivering from Noida · Mumbai · Bengaluru · Pune · Dubai · Cairo · Melbourne — see all locations & addresses →
