What HIPAA Training does

HIPAA Training, operated by Supremus Group LLC, is a U.S.-based compliance training and certification provider founded in 2006 and headquartered in Prosper, Texas. The company serves covered entities and business associates across healthcare by delivering role-based HIPAA training through an online learning management system that supports self-paced video/audio courses, interactive quizzes, instructor-led classroom sessions, virtual live classrooms, and private onsite delivery. Its product portfolio is anchored by a five-tier proprietary certification stack (CHPSE, CHSE, CHPE, CHPA, CCAP), supplemented by role-specific awareness courses (HIPAA for Healthcare Providers, Mental Health, Dentists, Business Associates, Group Health Plans, AI Use and Risk), OSHA-aligned offerings (Bloodborne Pathogens, Infection Control), Medicare/Medicaid FWA training, and vertical-specific bundles such as Medical Courier Certification and Business Builder training. Supporting the coursework is a template and consulting business, including 69-document Privacy Policies suites, 70+ Security Policies forms, 100+ Contingency Plan samples, plus project-based HIPAA risk analysis, audit, network security, and application security assessment services.

The business model combines self-serve e-commerce with direct enterprise sales. Pricing is publicly disclosed for most training products, ranging from a $25 one-hour awareness course to a $1,299 CHPSE expert certification, with bundles priced $54-$135, optional add-ons (practice tests, printed manuals, instructor support, unlimited exam attempts), and an annual $99 continuing education subscription. A 2026 simplified group training tier offers up to 300 staff trained for a one-time $20 donation, while enterprise customers engage via phone and email for bulk and onsite solutions. Customers include a mix of Fortune-500 healthcare and life sciences organizations (Aflac, Baxter, Cerner, Merck, BlueCross BlueShield of Florida, Catholic Health), government (U.S. Department of Veterans Affairs), and academic institutions (Auburn University), alongside a long tail of individual and SMB buyers acquired primarily through organic SEO and content marketing. Distribution combines two e-commerce storefronts (hipaatraining.net and supremusstore.com), direct sales, and a 2026 affiliate partner program; revenue streams are split across course fees, template sales, consulting engagements, and recurring CE renewals. The company is founder-owned, privately held, has no institutional funding, and employs 11-50 people.

Name

HIPAA Training

Legal name

Supremus Group LLC

Website

https://hipaatraining.net

Company type

Private

Founded year

2006

Operating status

Operating

Headcount range

11–50 employees

Short description

HIPAA Training (Supremus Group LLC) provides HIPAA compliance training, five-tier professional certification (CHPSE/CHSE/CHPE/CHPA/CCAP), compliance template suites, and consulting services to healthcare providers, business associates, health plans, and government agencies since 2006.

Ownership category

akta.pro rank

Product category

Healthcare Compliance Training

NAICS

Business Schools and Computer and Management Training (6114), Professional and Management Development Training (611430), Professional, Scientific, and Technical Services (541)

SIC

Services-Engineering, Accounting, Research, Management (8700), Services-Legal Services (8111)

akta.pro primary industry

Legal & Compliance (EDAAAPAJ)

akta.pro secondary industries

Health Information Management (EHR) & Medical Office Administration (EDAOAJAF), Audit, Inspection & Quality Compliance (Internal Auditing, CAPA) (EDABAKAN)

Keywords

• HIPAA compliance training
• Healthcare certification programs
• Cybersecurity awareness training
• Compliance consulting services
• Privacy policy templates

Headquarters

HQ city

Prosper

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Others

Revenue model

1. Certification Training Courses: One-time fee for individual course enrollment with exam attempt. Pricing varies by certification level from $25 basic awareness to $1,299 comprehensive expert certification. Includes optional add-ons like printed manuals ($320), practice tests ($75), instructor support ($250), and unlimited exam attempts ($150).
2. Compliance Template Products: Pre-built document packages sold as one-time purchases. HIPAA Privacy Policies Template Suite (69 documents) for 2026 compliance; Security Policies (70+ forms); Contingency Plans (100+ samples).
3. Consulting Services: Custom HIPAA compliance consulting including risk analysis, policy development, security assessments, penetration testing, and audit preparation. Sold as project-based engagements or hourly engagements.
4. Group Training: Affordable bulk training option allowing organizations to train up to 300 staff members for a one-time $20 donation, with no subscriptions or contracts required.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels4 records

Core offering

HIPAA Training delivers HIPAA and healthcare compliance training, five proprietary certification programs (CHPSE, CHSE, CHPE, CHPA, CCAP), role-based awareness courses, and consulting services such as risk analysis, policy development, audits, and security assessments. It also sells pre-built compliance document template suites (Privacy, Security, Contingency, Risk Analysis, Incident Response) to help healthcare covered entities and business associates achieve and maintain regulatory compliance.

Product overview

HIPAA Training (operated by Supremus Group LLC) offers a comprehensive portfolio of compliance training, certification programs, and consulting services for healthcare organizations. The product suite centers on five core certification tracks: Certified HIPAA Privacy Security Expert (CHPSE), Certified HIPAA Security Expert (CHSE), Certified HIPAA Privacy Expert (CHPE), Certified HIPAA Privacy Associate (CHPA), and Certified CyberSecurity Awareness Professional (CCAP). These are delivered through multiple formats including online anytime self-paced courses, virtual classroom live sessions, and instructor-led classroom training. Supporting the certification programs are role-specific awareness courses (HIPAA for Healthcare Providers, HIPAA for Mental Health Providers, HIPAA for Dentists, HIPAA for Business Associates, AI Use Risk & Awareness Training), OSHA compliance training (Bloodborne Pathogens, Infection Control), and Medical Courier Certification. The company also provides consulting services for HIPAA Risk Analysis, Privacy Policies, Security Policies, Contingency Plans, Audits, Network Security, and Application Security Assessment, along with a library of template products for DIY compliance (Privacy Policies Template Suite with 69 documents, Security Policies Template Suite with 70+ templates, Contingency Plan Template Suite with 100+ samples). The portfolio is anchored by the CHPSE certification program at $1299, with training bundles priced from $54 to $135 and individual awareness courses at $25-$99.

Differentiator

Problem solved

Functional benefit

Products and services

• Certified HIPAA Privacy Security Expert (CHPSE) Comprehensive expert-level certification program for HIPAA Privacy Officers, Security Officers, Compliance Officers, and core compliance team members, covering HIPAA Privacy and Security Rule requirements including administrative, physical, and technical safeguards. 24 hours, 27 chapters, 1,049 slides, priced at $1,299 per person.
• Certified HIPAA Security Expert (CHSE) Expert-level certification for IT Managers, Security Auditors, Security Consultants, Network Managers, Database Administrators covering HIPAA Security Rule. 16 hours, 19 chapters, 670 slides, priced at $747 per person.
• Certified HIPAA Privacy Expert (CHPE) Expert certification for privacy compliance team members, HR Managers, Office Managers, Head Nurses, Privacy Analysts, and healthcare administrators covering HIPAA Privacy Rule requirements. 13 hours, 14 chapters, 572 slides, priced at $747 per person.
• Certified HIPAA Privacy Associate (CHPA) Entry-level HIPAA privacy certification for healthcare employees, administrative staff, and business associates needing basic HIPAA privacy training, priced at $99 per person.
• Certified CyberSecurity Awareness Professional (CCAP) Cybersecurity awareness certification covering social engineering prevention, phishing recognition, malware awareness, and cyber hygiene practices for protecting organizational assets.
• HIPAA Compliance Training (4-day instructor-led) Four-day intensive instructor-led training covering comprehensive HIPAA Privacy and Security compliance for healthcare professionals, available in classroom, virtual classroom live, and private onsite formats.
• HIPAA Security Training (2-day instructor-led) Two-day training focused on HIPAA Security Rule requirements, technical safeguards, and implementation, available in classroom and virtual classroom live formats.
• HIPAA Privacy Training (2-day instructor-led) Two-day training focused on HIPAA Privacy Rule requirements, patient rights, and privacy safeguards, available in classroom and virtual classroom live formats.
• HIPAA for Healthcare Providers Awareness training for healthcare providers covering HIPAA Privacy, Security, HITECH, and Omnibus Rules, including employee error prevention as primary cause of violations. Rated 4.9/5 by over 12,000 users.
• HIPAA for Mental Health Providers Specialized HIPAA training for mental health providers addressing unique privacy considerations for behavioral health information and substance use disorder records.
• HIPAA for Dentist Office HIPAA compliance training tailored for dental practices and oral healthcare providers.
• HIPAA for Group Health Plans Training for HR benefits staff managing employer group health plan benefits under HIPAA requirements.
• AI Use, Risk & Awareness Training for Employees Training covering AI governance, responsible AI use, risks associated with AI tools, and compliance considerations for AI in healthcare settings.
• HIPAA for Business Associates HIPAA training for vendors, IT service providers, cloud vendors, billing companies, software firms, labs, medical couriers, and contractors handling PHI on behalf of covered entities.
• OSHA Bloodborne Pathogens Training OSHA-compliant training for handling bloodborne pathogens and infectious materials in healthcare settings.
• Medical Fraud, Waste and Abuse (FWA) Training Training for Medicare/Medicaid providers on preventing medical fraud, waste, and abuse in healthcare operations.
• Medical Courier Certification Training Bundle Seven-course certification bundle for medical couriers covering HIPAA compliance, specimen handling, infection control, chain-of-custody, and healthcare documentation procedures. Priced at $90 for the bundle.
• Infection Control Training Infection control training covering hand hygiene, PPE usage, sterilization, sharps safety, and outbreak prevention for healthcare workers. Available in English and Spanish at $25 per person; rated 4.9/5 by 365 users.
• Medical Courier Business Builder Training Six-hour self-paced training for starting and managing medical courier operations, including 70+ downloadable business templates for contracts, pricing calculators, and client outreach checklists. Rated 4.9/5 by 603 users.
• Texas HB 300 HIPAA Course Specialized HIPAA training for Texas-based healthcare organizations covering Texas House Bill 300 requirements in addition to federal HIPAA.
• CHPSE Practice Test Practice test with 120 multiple-choice questions to prepare for the Certified HIPAA Privacy Security Expert certification exam, priced at $75.
• CHSE Practice Test Practice test with 180 multiple-choice questions to prepare for the Certified HIPAA Security Expert certification exam, priced at $75.
• One-Hour HIPAA Employee Training Entry-level awareness training for employees with access to PHI, costing $25 for basic awareness certification.
• Annual Continuing Education Update Course One-hour annual update course covering regulation changes and OCR/HHS enforcement activities, priced at $99 annually as a subscription to maintain certification currency.
• HIPAA Risk Analysis Service Professional risk analysis consulting to identify vulnerabilities in processes, systems, and policies as required under HIPAA Security Rule Section 164.308(a)(1). Sold as project-based or hourly engagements.
• HIPAA Privacy Policies Consulting Custom policy development for HIPAA-compliant privacy policies and procedures tailored to organizational operations.
• HIPAA Security Policies Consulting Development of HIPAA-compliant security policies covering administrative, physical, and technical safeguards.
• HIPAA Contingency Plan Consulting Business continuity and disaster recovery planning for HIPAA compliance addressing availability security principles.
• HIPAA Audit Service Comprehensive HIPAA compliance audit evaluating policies and procedures against Privacy, Security, and Breach Notification Rules following OCR process.
• Network Security Solution Technical compliance solutions including vulnerability assessment, penetration testing, ransomware protection, and endpoint security for healthcare entities.
• Massachusetts Data Privacy & Security Policy Service Policy and procedure creation for Massachusetts data protection laws including M.G.L. 93H, M.G.L. 93I, and 201 CMR 17.00 requirements.
• Application Security Assessment Security testing for web applications including static and dynamic analysis, penetration testing, and code reviews to identify vulnerabilities. Rated 4.8/5 by 187 users.
• HIPAA Privacy Policies Template Suite 69-document template package for creating and maintaining HIPAA privacy policies and procedures, including AI governance and substance use disorder records templates.
• HIPAA Security Policies Template Suite Over 70 forms, policies, and procedures for HIPAA Security Rule compliance.
• HIPAA Contingency Plan Template Suite Over 100 samples, guides, forms, and policies for business impact analysis, business continuity plan, and disaster recovery plan.
• HIPAA Risk Analysis Template Suite Template documents for conducting self-service HIPAA security risk analysis.
• Cyber Security Incident Response Plan Template Suite Template suite for developing organizational cybersecurity incident response plans.
• Free Phishing Test for Employees Free phishing email test tool for organizations to assess employee susceptibility to phishing attacks.

Quantifiable outcome

• HIPAA Awareness Training reduces employee error as primary cause of HIPAA violations
• +2 more outcomes

Named customers8 records

Segments8 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Scale indicators8 records

Recent moves5 records

Expansion highlights5 records

Broad incumbents

• HealthStream: Public healthcare workforce development platform offering compliance, credentialing, and LMS solutions to hospitals and health systems. Broad incumbent with HIPAA training as part of a much larger healthcare learning portfolio, competing for the same enterprise compliance budgets.
• Relias: Healthcare-focused training and workforce compliance platform serving hospitals, behavioral health, and post-acute providers. Comparable in targeting healthcare workforce compliance training but operates at significantly larger scale with integrated LMS, assessments, and analytics.
• KnowBe4: Security awareness and phishing simulation platform widely used by healthcare organizations. Overlaps with HIPAA Training's CCAP cybersecurity awareness certification and free phishing test offering; broader scope covering all industries but heavy healthcare adoption.
• Vector Solutions (formerly SafeSchools): Workforce compliance and training platform with strong presence in healthcare, education, and government. Competes for enterprise training RFPs alongside HIPAA Training with broader compliance catalog and stronger institutional sales coverage.

Direct peers

• Accountable HQ: HIPAA compliance platform combining policy management, training, and risk assessment tools for small-to-mid-size healthcare providers. Direct peer in HIPAA training plus template/policy content with SaaS delivery model.
• 360training: Online regulatory compliance training marketplace offering HIPAA, OSHA, and healthcare compliance courses to individuals and enterprises. Comparable e-commerce-led GTM, broad course catalog, and similar price points for compliance certifications.
• Compliancy Group: HIPAA-focused compliance software and training provider offering policy templates, risk analysis, training, and tracking tools for covered entities and business associates. Directly comparable product mix (training + templates + consulting) targeting the same SMB healthcare buyer.

Regional players

• ABS Network / AAPC: Medical coding, billing, and healthcare compliance certification organization with training and credentialing programs. Partial overlap in healthcare compliance certification, with stronger positioning in medical coding rather than HIPAA-specific content.

Emerging players

• Medbridge: Healthcare-specific education platform with compliance training as part of broader continuing education for clinicians. Overlaps with HIPAA Training's specialty compliance content but is differentiated toward PT/OT/SLP and clinical continuing education.

Others

• HHS Office for Civil Rights (OCR) Training Resources: Federal regulator providing free HIPAA training resources and guidance documents. Not a commercial competitor but the primary free alternative that sets the price floor for HIPAA training and pressures commercial offerings on basic awareness content.

Market position

Strengths5 records

Weaknesses4 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Facebookfacebook.com/HIPAATrainingOnline
• LinkedInlinkedin.com/company/hipaa-training

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about HIPAA Training