Frameworks
Available by configurationHIPAA — Privacy, Security & Breach Notification
US healthcare privacy, security and breach-notification readiness for covered entities and business associates.
Overview
NOVA supports HIPAA readiness records for Security Rule, Privacy Rule, Breach Notification Rule and business-associate obligations.
Who this is for
- Covered entities handling protected health information
- Business associates processing health data for customers
Governance areas
Security safeguards
Track administrative, physical and technical safeguards with evidence.
Privacy and disclosure
Record permitted-use, minimum-necessary and individual-rights decisions.
Breach response
Maintain assessment, escalation and notification decision records.
How NOVA supports this framework
- Record safeguard applicability and human review
- Link ePHI system, access and training evidence
- Track breach assessment and business-associate governance
Controls and evidence focus
- Security risk analysis
- Access, MFA and audit-log reviews
- Business-associate and breach registers
Cross-framework reuse
Access, incident, continuity and audit evidence can support related security frameworks where it is materially applicable.
NOVA assists with readiness and evidence management. Certification, attestation and regulatory conclusions remain with authorised independent, regulatory or customer-appointed parties.
Pricing
Plans that cover HIPAA
Plans are subscription entitlements on one workspace, so you can start with a single framework and widen scope later.
Launch
USD $99 /month
A first certification or attestation programme run properly from the start.
- 3 activated frameworks
- Up to 1 authorised GitHub repository
- Control ownership and review cadence
- Evidence mapping and reviewer validation
Growth
Most chosenUSD $249 /month
Three frameworks on one shared control set, with reuse across requirements.
- 3 activated frameworks
- Cross-framework control and evidence reuse
- Up to 3 authorised GitHub repositories
- Risk register with treatment and acceptance
Professional
USD $499 /month
Assurance-grade operation with external review workflows included.
- All available frameworks
- All authorised GitHub repositories
- Auditor Portal with scoped engagement access
- Trust Centre publication
Enterprise
On request
Quoted per organisation against scope, users and assurance requirements.
- All authorised GitHub repositories
- Scope defined per organisation
- Commercial terms agreed with Eredox
- Structured onboarding programme
Published NOVA plan prices are shown in USD.
Getting started
How to start with HIPAA
Four steps from an empty workspace to a reviewable readiness position.
- Step 1
Activate the framework
Create the workspace and activate HIPAA so its requirements load into your control set.
- Step 2
Assign control ownership
Give each control a named owner and a review cadence, so accountability is recorded rather than assumed.
- Step 3
Map and validate evidence
Attach evidence to the requirements it supports and have a reviewer confirm it is current and sufficient.
- Step 4
Review readiness
Track gaps and readiness reporting, then decide with your assessor when the programme is ready for external review.
NOVA accelerates your launch preparation, but final decisions remain human.
Talk to us
Ask about HIPAA — Privacy, Security & Breach Notification
Tell us your scope, timeline and any assessment date you are working to. We will reply with what NOVA covers and what remains with your independent assessor.
NOVA assists with readiness and evidence management. Certification, attestation and regulatory conclusions remain with authorised independent, regulatory or customer-appointed parties.
See NOVA against your own compliance obligations
Explore the governed Free access path, or walk through your framework, evidence and reporting requirements with us.
NOVA accelerates your launch preparation, but final decisions remain human.