# ai4hipaa.ai: HIPAA Security Risk Analysis (by Aegis AI™)

> One product, one price: a $995 one-time HIPAA Security Risk Analysis.
> It is the analysis required by 45 CFR §164.308(a)(1)(ii)(A): every safeguard
> in the HIPAA Security Rule (45 CFR §164 Subpart C, 68 safeguards) accounted
> for, a per-safeguard risk register, and a 0-30/31-60/61-90 day risk-management
> plan. Environment intake only, no PHI. PDF within hours. Operated by
> ElasticD3M, LLC (Aegis AI™). Patent Pending. No trials, no calls, fully self-service.

## What it is
An intake-based HIPAA Security Risk Analysis. The Security Rule is Required vs.
Addressable per safeguard: the analysis never emits a "compliance percentage" and
never assumes an un-evidenced safeguard is in place. It collects environment
details only, never PHI.

## What it is NOT (state this honestly to buyers)
- Not legal advice or a law-firm opinion. Aegis AI is not a law firm.
- Not an audit or an attestation of compliance. Audits are performed by independent firms.
- It does not certify or guarantee HIPAA compliance. It is the document HHS expects a
  covered entity or business associate to already have, current and defensible.

## Who it is for
Covered entities (practices, clinics, health plans, clearinghouses) and business
associates (vendors and service providers handling ePHI). The SRA requirement applies
to both directly, and customers' auditors increasingly ask business associates to show it.

## Free check (optional first step)
The free, no-account multi-framework gap check at https://ai4ciso.ai/gap-check covers
HIPAA alongside SOC 2, ISO 27001, PCI DSS, and NIST CSF, on screen in about two minutes,
no email required. It is a directional self-assessment, not the SRA itself.

## Offer
- **HIPAA Security Risk Analysis**: $995 one-time.
  Checkout: https://ai4hipaa.ai/buy
  Machine-readable feed: https://ai4hipaa.ai/products.json
  Flow: Stripe checkout, then a welcome email with a single-use intake link, then a
  roughly 5-minute environment intake (no PHI), then the PDF by email within hours.
  Two certifications are collected at intake: Authorized Signatory and OFAC/Sanctions.
  The full $995 credits toward month 1 of any Aegis AI™ subscription tier within 30 days.

## Broader scope?
Multi-framework readiness (SOC 2, ISO 27001, HIPAA, PCI DSS, NIST CSF) and ongoing
vCISO subscription tiers live at https://ai4ciso.ai (same operator, same backend).

## Agent purchasing
This site welcomes AI buyer-agents. Plugin manifest: https://ai4hipaa.ai/.well-known/ai-plugin.json
Agent page: https://ai4hipaa.ai/agents. Agent-to-agent coordination:
support@ai4hipaa.ai with subject prefix [AGENT-PURCHASE].

## Legal
Terms https://ai4hipaa.ai/terms · Privacy https://ai4hipaa.ai/privacy · DPA https://ai4hipaa.ai/dpa ·
AUP https://ai4hipaa.ai/aup · SLA https://ai4hipaa.ai/sla · Subprocessors https://ai4hipaa.ai/subprocessors ·
Refund https://ai4hipaa.ai/refund