Compliance Pack

The Compliance Pack helps administrators prepare HIPAA and SOC 2 evidence from CaseSolo activity.

What It Includes

• BAA template status and signature tracking.
• HIPAA readiness score and configuration checklist.
• PHI access log review.
• Data-retention policy review.
• Redaction workflow queue for documents that need PHI removal.
• Evidence export for auditors or security reviews.

Export Evidence

Admins can export the HIPAA evidence pack from the compliance area. The export includes current settings, BAA template content, PHI access logs, retention audit results, and pending redaction work.

Do not send exports to anyone who should not see PHI or firm security information.

Redaction Workflow

Documents tagged for HIPAA review appear in the redaction workflow. A pending item should be reviewed, redacted if needed, and marked complete only after the redacted version is approved.

PHI Access Logs

PHI access logs show who viewed, downloaded, shared, exported, modified, deleted, redacted, or unredacted sensitive health information. Use these logs during internal reviews, client security reviews, or breach investigations.

Important Note

The Compliance Pack helps organize evidence and controls, but it does not replace legal advice, a formal HIPAA assessment, or a SOC 2 audit performed by an independent auditor.