How well do your safeguards line up with the HIPAA Security Rule?
Answer 24 yes/no questions about your security practices. Get a score and a ranked list of the gaps to fix first. It takes about five minutes.
- Free
- No patient information collected
- Nothing stored in your browser
What this is not. SafeguardScore is a quick self-check. It is not a formal security risk analysis under 45 CFR 164.308(a)(1)(ii)(A) and not a compliance certification. A high score does not mean you are compliant, and a low score does not mean you are in violation. SafeguardScore is an independent tool and is not affiliated with or endorsed by HHS or its Office for Civil Rights.
0 of 24 answered
Your gaps, ranked
Want a fuller review?
Leave your email and we will send your results and follow up about a more detailed review. Please do not include any patient information.
How the score works
Each question maps to a standard or implementation specification in the Security Rule (45 CFR 164 Subpart C: administrative, physical and technical safeguards). Questions are weighted by how much the safeguard matters to protecting electronic patient data. Your score is the weight of the safeguards you have in place divided by the total weight. Gaps are ranked by weight, with required safeguards listed ahead of addressable ones at the same weight.
Rule status: the current Security Rule still applies. HHS proposed major changes in January 2025 (for example, making encryption and multi-factor authentication mandatory). That proposal is not final, and this tool scores against the current rule, not the proposal. Requirements may change.