Help
Frequently asked questions
Common questions about the portal, your plan, and what the portal does and doesn't do.
For HIPAA questions (what counts as PHI, who needs a BAA, how breach notification works), see the Support Center FAQ. Below are questions about the portal itself.
About the portal
Does using the portal mean we're officially HIPAA approved?
HHS doesn't issue any official HIPAA seal or stamp of approval, and neither does anyone else. The portal helps you build, run, and document your compliance program, so you have the records to show your work. Your organization remains responsible for its own compliance.
Is this legal advice?
No. Chuck Weiselberg is not an attorney and One Guy Consulting is not a law firm. For decisions that depend on your specific facts, talk to an attorney, or book a call to talk through how the portal can help.
Should we put patient information in the portal?
No. The portal is for your compliance records, not patient records. Describe incidents and notes in general terms. See Your data and privacy.
We're a Business Associate. Does the portal work for us?
Yes. Choose Business Associate as your Organization Type in Settings, and use the Business Associate filter on your policy list to see the policies that apply to you.
Can more than one person manage our program?
Yes. Privacy Officer and admin accounts see the same screens and the same data. To add one, email hello@oneguyconsulting.com.
Can I invite my whole team at once?
Not yet. Invite one person at a time from Employees > Invite Employee.
How long does training take?
Each module is 18 slides and an 8-question quiz, taken at your own pace. There's no timer.
Can I download policies as PDFs?
Not yet. Download gives you the template as a text file.
Do BAAs expire in the portal?
No. Instead, record an Annual BAA Review on each vendor every year.
Does the portal decide whether an incident is a breach?
No. It records incidents and tracks their status. Whether something is a reportable breach depends on the facts. Email hello@oneguyconsulting.com for help with a specific incident.
Plans and billing
What's the difference between Self-Guided and Full-Scope?
Both include the full portal. Full-Scope adds four hours of one-on-one consulting with Chuck each month, personalized implementation, incident response guidance, CMS audit response support, RFP assistance, priority support, and audit-readiness preparation. See Plans and billing.
How much does it cost?
Self-Guided is $675 a year, $60 a month, or $1,175 for two years upfront. Full-Scope is $1,300 a year, $120 a month, or $2,300 for two years upfront.
Do you charge per user?
No. It's one flat rate per organization, with no per-user fees and no per-module charges.
Is there a free trial?
No, there is no free trial.
How do I cancel or update my card?
Email hello@oneguyconsulting.com. There's no billing screen inside the portal yet. See Cancellation and refunds.