The practices you help keep HIPAA compliant now need accessible websites, patient portals, and forms. We do the testing, so you can offer it to your clients. Led by a DHS Certified Trusted Tester.
HHS's Office for Civil Rights enforces HIPAA. It also enforces Section 504, which now requires healthcare providers that receive federal funding to meet WCAG 2.1 AA on their websites, apps, and documents.
HHS has said it may revisit parts of the rule. The ADA applies either way, and businesses faced over 3,000 website accessibility lawsuits in federal court in 2025.
HHS Section 504 deadlines
- 15 or more employees
- May 11, 2027
- Fewer than 15 employees
- May 10, 2028
Covers websites, patient portals, mobile apps, and the PDFs and forms posted on them.
You keep the relationship. We do the testing.
For HIPAA consultants, compliance officers, and practice consultants
Introduce us when a client needs an audit. We scope it, test it, and work with them directly, with our name and credential on the report. You earn a referral fee on the work, and your client gets peace of mind.
For healthcare IT providers, MSPs, and compliance software companies
Add accessibility testing to the compliance package you already sell, with no one to hire or train. You invoice the client and set your price. We test, write the report under your name, and retest after fixes. If you'd like the credential to show, add a 'Tested by a DHS Certified Trusted Tester' line.
For health care attorneys, and attorneys who represent localities and schools
When a client gets a demand letter, we can audit quickly so you know what's real before you respond. Audits can run through counsel if that suits how you handle it. And when our clients ask whether they're legally covered, we send them to you.
Testing by hand
Keyboard, zoom, high contrast, and screen readers. Scanners alone miss most of what blocks patients.
A report anyone can follow
Every issue, where it is, which WCAG criterion it fails, and how to fix it. An office manager can follow it, and whoever manages the site can act on it.
Fixes, if they want them
If you or your team would like us to make the fixes, we can.
A retest and a record
We confirm the fixes hold, and your client has a written record of the work.
You choose how involved you want to be. We handle the testing either way.
Curious what your clients would get? See a sample audit report (PDF).
A short conversation
We learn how you work with clients and which model fits.
When a client needs it
You bring us in, or sell it under your name.
By hand
We scope the work, test it, and write the report.
Then a retest
Their team makes the fixes, or we do. Then we retest so you can tell your client it's done.
Don't see yours?
Do I need to know accessibility?
No, that's our part. We'll give you plain explanations to pass along, and we're glad to join a client call if it helps.
Who owns the client relationship?
You do. The client stays yours, and we won't go around you. With white-label work, your client never hears our name unless you want them to.
What if a marketing company or website vendor runs the practice's site?
That's common. The report is written so whoever manages the site can act on it without us in the room. If you or your team would like us to make the fixes, we can.
Is this legal advice?
No. We're not lawyers. We find what's broken and help fix it. Whether a rule applies, and how much risk a client carries, is a question for their attorney.
Does this apply to small practices?
Yes. Under Section 504, practices with fewer than 15 employees have until May 10, 2028. The ADA has no size cutoff.
What if HHS changes the rule?
It might. HHS has said it plans more rulemaking. The ADA risk doesn't depend on it, and an accessible site works better for patients either way.
Can this fit into our annual risk assessment?
Yes. An audit can run alongside it, with a regular retest once the big fixes are in.
If you want to go fast, go alone. If you want to go far, go together.