What The HIPAA E-Tool does

The HIPAA E-Tool is an Internet-based SaaS compliance platform operated by ET&C Group LLC, a privately held Missouri LLC headquartered in St. Louis. The platform is designed to help U.S. healthcare covered entities, business associates, health plans, and third-party administrators achieve and maintain HIPAA compliance through interactive, step-by-step workflows. Core product components include customizable policies, procedures, and forms; a Risk Analysis module addressing both ePHI and non-electronic PHI; a Breach Risk Assessment Tool; a Risk Management tracking system with auto-populated annual renewal forms; an interactive Search Box functioning as a HIPAA knowledge base; and built-in workforce training materials. The platform uses NIST SP 800 series terminology translated into plain-language interactive forms accessible to non-IT specialists, and is updated in real time whenever HIPAA regulations change. Separate editions exist for providers, health plans, business associates, and third-party administrators, and the product supports both single-location and multi-site organizations with differentiated administrator and authorized user roles.

The company operates a sales-led go-to-market motion anchored on a "Request a Demo" call-to-action, complemented by a self-serve web application accessible at app.thehipaaetool.com. Revenue is generated through recurring annual SaaS subscriptions, though pricing is quote-based and not publicly disclosed. Demand generation is driven by a content marketing engine including a regularly updated blog, free lead magnets (HIPAA Checklist and Audit Defense Guide), an email newsletter, and active social media channels. Complementary offerings include live in-person HIPAA compliance training and one-on-one sessions. The product content is written by Paul R. Hales, a nationally recognized HIPAA compliance attorney, which provides legal authority and defensibility. Notable customers include Family Behavioral Health Agency (Seattle), a St. Louis physician practice, a Midwest group dental practice, McCall Behavioral Health Network, and a Texas home healthcare agency — all SMB or mid-market healthcare organizations.

The company is founder-led with no disclosed institutional funding, no parent company, no subsidiaries, and no acquisition activity. It maintains two registered trademarks (The HIPAA E-Tool® and Protecting Patient Privacy is Our Job®) and distributes exclusively through direct online channels within the United States, with no international footprint or third-party reseller relationships. The business model is capital-efficient and focused on a niche regulatory compliance vertical where switching costs accumulate over multiple annual compliance cycles.

Name

The HIPAA E-Tool

Legal name

ET&C Group LLC

Website

https://thehipaaetool.com

Company type

Private

Founded year

2014

Operating status

Operating

Headcount range

1–10 employees

Short description

The HIPAA E-Tool is a SaaS compliance platform operated by ET&C Group LLC that provides U.S. healthcare covered entities, business associates, and health plans with interactive HIPAA policies, risk analysis, risk management, and workforce training tools, with content authored by HIPAA attorney Paul R. Hales.

Ownership category

akta.pro rank

Product category

Healthcare Compliance Software

NAICS

Computer Systems Design Services (541512)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Governance, Risk & Compliance (GRC) + HIPAA/HITRUST/ISO Readiness (HLACAJAJ)

Keywords

• HIPAA compliance software
• Risk assessment tools
• Healthcare compliance
• Policy management
• Workforce training

Headquarters

HQ city

St Louis

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. SaaS Subscription (Software as a Service): The HIPAA E-Tool is a subscription-based SaaS compliance platform. Customers pay a recurring subscription fee to access the full platform including all policies, procedures, forms, Risk Analysis module, Risk Management tools, and training resources. The subscription is accessed via web browser or dedicated app URL (app.thehipaaetool.com). Pricing is quote-based and not publicly disclosed on the website.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels7 records

Core offering

The HIPAA E-Tool is an Internet-based SaaS compliance platform that walks healthcare organizations step-by-step through HIPAA Rules, providing policies, procedures, forms, a risk analysis module, a risk management module, a breach risk assessment tool, and workforce training. It is offered in specialized editions for covered entities (providers), health plans, business associates, and third-party administrators, with content authored by HIPAA attorney Paul R. Hales. Real-time regulatory updates are pushed to subscribers whenever HIPAA regulations change or new federal guidance is issued.

Product overview

The HIPAA E-Tool is a single, unified Internet-based SaaS compliance solution designed specifically for healthcare organizations to achieve and maintain HIPAA compliance. The core product, The HIPAA E-Tool, serves as the main platform providing all required HIPAA policies, procedures, and forms, supplemented by a dedicated Risk Analysis Module that guides users through identifying vulnerabilities to PHI and ePHI, and a Risk Management Module that helps organizations document and implement safeguards. Workforce Training is offered as an integrated component covering employee education through webinars and sessions. The product is organized by specific editions for covered entities, business associates, health plans, and third-party administrators, and features an interactive Search Box that provides plain-language explanations of HIPAA topics like Wikipedia for HIPAA compliance.

Differentiator

Problem solved

Functional benefit

Products and services

• The HIPAA E-Tool
• HIPAA Workforce Training Services

Quantifiable outcome

• Most organizations install a complete HIPAA Compliance Program in 2–3 days using the platform.
• +1 more outcomes

Named customers6 records

Segments5 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature8 records

Scale indicators1 record

Recent moves3 records

Expansion highlights3 records

Direct peers

• Compliancy Group: HIPAA-focused SaaS compliance platform providing policies, training, risk analysis, and compliance tracking for covered entities and business associates. Closely comparable in customer segment, product category, and self-serve/sales-led GTM motion.
• Accountable HQ: HIPAA compliance software delivering policies, procedures, training, and risk assessments for healthcare providers and business associates. Directly competes in the same SMB-to-mid-market HIPAA compliance SaaS segment.
• HIPAA One: HIPAA risk analysis and compliance automation software used by healthcare organizations of similar size and structure. Closely aligned on the risk analysis and Security Rule workflow that anchors The HIPAA E-Tool's offering.
• Total HIPAA Compliance: Provides HIPAA compliance software, training, and consulting to healthcare providers and business associates. Comparable customer base and product mix spanning policies, training, and ongoing compliance support.
• Clearwater Compliance: Healthcare-focused cybersecurity and HIPAA risk analysis firm offering software-backed compliance programs. Comparable on healthcare-only focus and risk analysis methodology, though typically oriented to larger enterprise customers.

Broad incumbents

• Vanta: Broadly funded compliance automation platform covering SOC 2, ISO 27001, HIPAA, and more. Competes for the same compliance budget at healthcare-adjacent technology vendors and digital health companies, though not a healthcare pure-play.
• Drata: Compliance automation platform with HIPAA among its supported frameworks. Targets technology-oriented buyers needing continuous compliance monitoring, overlapping with business associate and digital health customers of The HIPAA E-Tool.
• LogicGate: GRC platform used by mid-market and enterprise organizations to manage risk and compliance workflows including HIPAA. Competes for the same enterprise healthcare and business associate compliance budget with broader GRC scope.
• Secureframe: Compliance automation platform supporting HIPAA, SOC 2, and other frameworks with continuous monitoring. Comparable for digital health and technology-enabled healthcare buyers needing HIPAA alongside other compliance regimes.

Emerging players

• Meditology Services: Healthcare cybersecurity and HIPAA risk management firm blending services with software tooling. Comparable on healthcare-only focus and HIPAA risk analysis methodology, though more services-led than SaaS-led.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/hipaaetool

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about The HIPAA E-Tool