HIPAAtrek
HIPAAtrek sells an all-in-one cloud-based HIPAA compliance software platform — covering BAAs, training, policies, and breach management — primarily to small and rural U.S. hospitals, clinics, and healthcare groups via annual subscriptions and add-on consulting services.
- Company typePrivate
- Founded2015
- HeadquartersSt Louis, United States
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What HIPAAtrek does
HIPAAtrek Inc. is a private, fully remote U.S. software company that sells an all-in-one cloud-based HIPAA compliance platform to healthcare organizations, primarily small and rural hospitals, clinics, and healthcare groups. The platform consolidates four core modules — BAA and contract management, HIPAA training, policy management, and breach and risk assessment — into a single system with 10-year version histories, expert-built templates, automated security reminders, role-specific training videos and quizzes, and audit-ready documentation. Revenue is generated through annual SaaS subscriptions priced on a quote basis per organization (fees tied to feature access, not usage), supplemented by add-on professional services for Security Risk Analysis and Privacy Gap Assessments.
The company was founded in 2015 by Sarah Badahman, a former healthcare administrator, and is currently led by CEO Amy Coulter. HIPAAtrek has raised approximately $1,000,000 in disclosed funding to date (a $75,000 seed in 2015 from Arch Grants, Capital Innovators, and New York Angels, and an approximately $925,000 round in August 2018 from undisclosed investors), and operates with a small team of 1-10 employees. Go-to-market is a direct enterprise field sales motion built around personalized one-on-one demos, supported by a content engine that includes a blog, monthly HIPAA Huddle webinars, the Armchair HIPAA podcast, and a library of downloadable resources.
HIPAAtrek's competitive positioning is anchored to the upcoming 2026 HIPAA Privacy and Security Rule updates, which the company states will change over 30% of the HIPAA framework. The platform is designed around OCR investigations and corrective action plans, with a stated commitment to deliver updated policy, BAA, and NPP templates within 45 days of rule finalization. Named customers include Bartlett Regional Healthcare, Uvalde Memorial Hospital, Muenster Memorial Hospital, and North Sunflower Medical Center — all small healthcare providers using the platform to centralize compliance workflows previously managed through disconnected spreadsheets and manual tracking.
HIPAAtrek firmographics
Firmographics- Name
- HIPAAtrek
- Legal name
- HIPAAtrek Inc.
- Website
- https://hipaatrek.com
- Company type
- Private
- Founded year
- 2015
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- HIPAAtrek sells an all-in-one cloud-based HIPAA compliance software platform — covering BAAs, training, policies, and breach management — primarily to small and rural U.S. hospitals, clinics, and healthcare groups via annual subscriptions and add-on consulting services.
- Ownership category
- akta.pro rank
HIPAAtrek industry classification
Industry- Product category
- Healthcare Compliance Software
- NAICS
- Custom Computer Programming Services (541511), Software Publishers (513210), Computer Systems Design and Related Services (54151)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Programming Services (7371)
- akta.pro primary industry
- Remote Patient Monitoring (RPM) Platforms & Services (HLACAPAA)
- akta.pro secondary industry
- Patient App, Adherence & Engagement for RPM Programs (HLACAFAJ)
Keywords
Where HIPAAtrek is headquartered
LocationHeadquarters
- HQ city
- St Louis
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
HIPAAtrek business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Software Subscription: Annual subscription-based SaaS model with a minimum subscription term of one year. Subscriptions automatically renew for successive renewal periods of the same duration unless cancelled with 60 days' written notice before the end of the term. Fees are based on access to platform features rather than actual usage, and are non-refundable.
- Consulting Services: Security Risk Analysis and Privacy Gap Assessment consulting services provided by HIPAAtrek's in-house compliance experts. Offered as add-on professional services to complement the software platform.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Platform-wide subscription covering all modules |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels8 records
HIPAAtrek product offering
Product offeringCore offering
HIPAAtrek sells a cloud-based, all-in-one HIPAA compliance software platform that helps healthcare organizations organize, automate, and report on every aspect of HIPAA compliance. The platform bundles four modules—BAA and Contract Management, HIPAA Training, Policy Management, and Breach/Risk Assessment—into a single subscription, supplemented by optional Security Risk Analysis and Privacy Gap Assessment consulting services delivered by in-house compliance experts.
Product overview
HIPAAtrek is an all-in-one HIPAA compliance software platform that organizes, automates, and generates reports on every aspect of HIPAA compliance for healthcare organizations. The platform consists of a core unified platform with four integrated modules: BAAs and Contract Management for managing business associate agreements; HIPAA Training for assigning role-specific training videos, quizzes, and security reminders; Policy Management for creating and managing policies with expert-built templates; and Breach Management for risk assessment and incident tracking. Additional offerings include consulting services and educational resources such as the Armchair HIPAA podcast. The platform is designed to be audit-ready and includes automated reminders, version history tracking, and compliance verification badges for customers.
Differentiator
Problem solved
Functional benefit
Products and services
- HIPAAtrek Compliance Platform An all-in-one cloud-based HIPAA compliance software platform that organizes, automates, and generates reports on every aspect of HIPAA compliance for healthcare organizations. Bundles BAA management, training, policy management, and breach/risk assessment with 10-year version history and a compliance verification badge.
- BAAs and Contract Management Module A module within the HIPAAtrek platform for organizing and categorizing Business Associate Agreements (BAAs), with collaborative review tools, centralized cloud storage, and automated version tracking retained for 10 years. Sold as part of the platform subscription.
- HIPAA Training Module A module within the HIPAAtrek platform for managing HIPAA training programs, allowing assignment of role-specific training videos and quizzes, automated security reminder emails, and built-in reporting to track training assigned, completed, and quiz results.
- Policy Management Module A module within the HIPAAtrek platform for creating, assigning reviews, and storing policies and procedures, with intuitive workflows, 70+ expert-built policy templates, and automatic 10-year version history.
- Breach Management Module A module within the HIPAAtrek platform for assessing organizational risks and identifying breaches and incidents, with self-assessment tools, built-in alerts for incomplete tasks, breach logging, and 10-year cloud documentation for audit readiness.
- HIPAA Compliance Consulting Expert consulting services including Security Risk Analysis, Privacy Gap Assessment, policy reviews, and roadmap development, provided by HIPAAtrek's in-house compliance experts as an add-on to the platform subscription.
Quantifiable outcome
- 10-year automatic version history for policies and BAAs, exceeding HIPAA's 6-year requirement
- +3 more outcomes
Companies that use HIPAAtrek
Customer profileNamed customers4 records
Segments3 records
Ideal customer profiles2 records
HIPAAtrek technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature5 records
HIPAAtrek partnerships and signals
Strategic signalScale indicators3 records
Recent moves6 records
Expansion highlights5 records
HIPAAtrek competitors and assessment
Company assessmentDirect peers
- Ostendio: Healthcare-focused compliance and risk management platform offering policy management, training, vendor risk, and audit readiness for HIPAA-covered entities. The closest direct competitor to HIPAAtrek in the healthcare-compliance SaaS niche.
- Vanta: Automated compliance platform that started in SOC 2 and has rapidly expanded into HIPAA, HITRUST, and other frameworks. Competes with HIPAAtrek for healthcare buyer budgets with a stronger automation and integration story.
- Drata: Compliance automation platform supporting HIPAA along with SOC 2, ISO 27001, and more, with continuous control monitoring. Targets the same healthcare and health-tech buyers as HIPAAtrek with a more automated, multi-framework pitch.
- Secureframe: Multi-framework compliance automation platform that includes HIPAA alongside SOC 2, ISO 27001, and PCI. Competes for healthcare customers seeking continuous compliance with auditor-built content.
- Hyperproof: Compliance operations platform with HIPAA, SOC 2, ISO 27001, and FedRAMP support and a strong evidence-collection workflow. Competes with HIPAAtrek in mid-market healthcare and digital health segments.
- Compliancy Group: HIPAA-specific compliance software for healthcare providers, offering policies, training, BAAs, and risk assessment. Closely overlaps HIPAAtrek's product surface and target ICP.
Broad incumbents
- LogicGate: Enterprise GRC platform with a HIPAA risk management module, sold broadly across industries. Reaches the same healthcare buyer as HIPAAtrek but as part of a wider GRC portfolio.
- RSA Archer (Regnology): Established enterprise GRC/IRM suite used by large hospitals and health systems, with HIPAA controls inside a much broader risk and compliance product. Represents the incumbent alternative for large healthcare enterprises.
- Tugboat Logic (OneTrust): Compliance automation platform now part of OneTrust's broader GRC portfolio, supporting HIPAA alongside SOC 2, ISO 27001, and privacy frameworks. Larger scale and adjacent to HIPAAtrek's target buyers.
Emerging players
- Accountable HQ: HIPAA compliance management platform for small healthcare practices with simplified policies, training, and BAAs. Targets the same lower end of HIPAAtrek's ICP with a lighter-weight product.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat4 records
Key risks6 records
Key highlights6 records
Customer concentration
HIPAAtrek social profiles
Digital presenceHIPAAtrek financial estimates
Financial estimateRevenue estimate
Valuation estimate
HIPAAtrek leadership team
Management profileNumber of profiles
Profiles3 records
HIPAAtrek funding detail
Funding detailFunding overview
Funding rounds2 records
Investors3 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
HIPAAtrek M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about HIPAAtrek
What does HIPAAtrek do?
HIPAAtrek sells a cloud-based, all-in-one HIPAA compliance software platform that helps healthcare organizations organize, automate, and report on every aspect of HIPAA compliance. The platform bundles four modules—BAA and Contract Management, HIPAA Training, Policy Management, and Breach/Risk Assessment—into a single subscription, supplemented by optional Security Risk Analysis and Privacy Gap Assessment consulting services delivered by in-house compliance experts.
Is HIPAAtrek a public or private company?
HIPAAtrek is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was HIPAAtrek founded?
HIPAAtrek was founded in 2015. It employs 1 to 10 people.
Where is HIPAAtrek based?
HIPAAtrek is headquartered in St Louis, United States, in the North America region.
How does HIPAAtrek make money?
Two revenue lines are on record. Software Subscription is the primary driver. The others are consulting Services.
Who are HIPAAtrek's main competitors?
Direct peers on record are Ostendio, Vanta, Drata, Secureframe, Hyperproof and Compliancy Group. Broad incumbents are LogicGate, RSA Archer (Regnology) and Tugboat Logic (OneTrust). Accountable HQ is listed as an emerging player.
Does HIPAAtrek have an API?
No public API is recorded for HIPAAtrek.
What industry is HIPAAtrek in?
HIPAAtrek's product category is Healthcare Compliance Software. Its primary akta.pro industry code is HLACAPAA, Remote Patient Monitoring (RPM) Platforms & Services, with a secondary code of HLACAFAJ, Patient App, Adherence & Engagement for RPM Programs. Its NAICS code is 541511 and its SIC code is 7370.