Mock HIPAA Auditthe OCR examiner, before the exam
For the healthcare compliance officer facing an OCR audit

Practice the HIPAA audit before the auditor arrives.

Paste your policy or evidence pack. An OCR investigator persona interrogates it with the questions a HIPAA auditor actually asks, each grounded in the Security Rule requirement text we hold, and scores how much of the rule your pack evidences.

Paste your own

Free to run. No account to start.

A healthcare compliance officer reviewing a security policy pack at a desk
Walk the pack past the examiner in the browser in under a minute, and leave with the questions a real audit opens with and the exact clause each one rests on. No tool that checks controls puts the assessor across the table from you; this does, on the text you already hold.
Paste a policy, a safeguards narrative, an access-control policy or a contingency plan. One pack at a time. The text is read in your browser.
Nothing is sent anywhere until you save an audit.

What the examiner asks, and the clause behind it

The specimen above is already run: a public-safe example policy, scored against the 67 requirements of the HIPAA Security Rule. Every "appears addressed" row quotes your own words back, so you can see exactly what the pack proved; every open row carries the question an OCR investigator opens with for that requirement and the artefacts they ask to see.

  1. Paste the pack. A safeguards narrative, a policy, an access-control procedure, a contingency plan, or a Business Associate Agreement.
  2. Read the examiner. Each of the 67 Security Rule requirements is scored: addressed, partly, or not evidenced, with the words in your pack that decided it.
  3. Answer the questions. The open requirements carry the auditor's questions and the evidence to bring, so you rehearse the interview before it happens.
  4. Fix the first gap. The result names the single highest-risk open requirement to close first, and the response sheet exports the whole thing.

Not a scanner. Not a ruling.

It scores the text you paste, not your organisation. Vanta and Drata check controls and gather evidence; neither puts the examiner across the table. This reads the pack the way an OCR investigator opens the interview, and it never rules that a requirement is met. Whether your control is implemented is the assessor's call. Free to run the mock audit; the full examiner transcript is USD 149.