CarePolicySign inStart free setup
HIPAA · 42 CFR Part 2 · state law

The compliance binder your surveyor asks for, written for your organisation.

CarePolicy drafts your HIPAA and state policies from regulatory text a qualified reviewer has verified, walks someone through approving every clause, and keeps the evidence that proves you follow them.

Behavioral health · EAP · Peer support · Crisis centers

Document checklist24 required
Notice of Privacy PracticesApproved
Breach Notification PolicyIn review
Workforce Training PolicyDue in 12 days
Business Associate AgreementNot started

Your checklist is built from the states you work in, the services you provide and who your staff are.

What makes it defensible

Verified law, not recollection

Documents are generated against regulatory text fetched from its official source and checked by a second person. Where a state requirement has not been verified, the document says so instead of inventing one.

Someone approved every clause

Review runs block by block, and the record of who approved what, and when, stays with the document. Higher plans add a certified reviewer or a consultant who leads the review.

Evidence, not just policies

Training records, executed agreements and incident investigations are collected alongside the policies, then assembled into one binder with a cover page, contents and appendices.

Built for four sectors, not one

The same HIPAA baseline reaches all of them, but the documents that sit on top differ — and so does the language inside them.

Behavioral healthPart 2 consent and patient notices where substance use services apply.
EAPEmployer agreements that limit reporting to utilisation data.
Peer supportVolunteer agreements, certification standards, escalation protocols.
Crisis centers988 network agreements, call documentation, workforce safety.

Start with the plan that fits

Plans differ in who reviews your documents and how many states they cover — from approving your own, to a certified reviewer, to a consultant who leads every review. Compliance consultancies run their own clients on CarePolicy under their brand.