Frequently Asked Questions

Stampwell is HIPAA and OSHA compliance software for healthcare practices. It trains your team, issues their certificates, generates your policies and collects the signatures, and keeps an audit log that proves all of it. You can start free.

Yes. Stampwell is built for healthcare organizations: dental offices, private practices, therapy and ABA practices, hospitals, and the MSOs and DSOs that support them. It gives you everything your organization needs for HIPAA compliance in one easy-to-use dashboard. Specifically, we make training your team, issuing certificates, creating practice policies, getting those policies signed, and even appointing HIPAA-required security and privacy officers completely effortless.

Yes. Stampwell is built for teams. Enter your team's emails and assign every Stampwell training in one step. Organizations can also write custom trainings and send documents like an employee handbook out for signature, all in one place.

Yes. Extremely simple. We refer to our software as 'effortless' for a reason. As an administrator, you sign up with your email. Then upload a list of all your team members. They get trained. We tell you when it is done. Effortless.

No. You will immediately get access to a fully customizable HIPAA certificate program for your team. OSHA Bloodborne Pathogens training comes ready-made too, and organizations can write their own custom trainings and upload an employee handbook for e-signature.

No. You will immediately get access to a fully customizable OSHA Bloodborne Pathogens certificate program for your team. HIPAA training comes ready-made too, and organizations can write their own custom trainings and upload an employee handbook for e-signature.

Yes. Dental offices are one of our most common customers.

Yes. Private practices are one of our most common customers.

Yes. Hospitals and health networks use Stampwell to train every location from one account and see who is trained at each site at a glance.

Yes. Dental service organizations and management services organizations manage training for every practice they support from one Stampwell account.

Yes. Every certificate is recorded on a tamper-evident ledger, so it cannot be forged or quietly altered. And unlike SCORM, the industry's standard course format, which is executable JavaScript that runs on every employee's computer, Stampwell training runs on PRIXL, a course format we built that is pure data and executes nothing.

KnowQo Health is the old name for Stampwell Open University. We recently rebranded. Nothing else changed, but we wanted a new name. If you were looking for KnowQo Health, you found the right place. Welcome to Stampwell Open University.

Stampwell is free because we want everyone to see how effortless compliance can be. Price should never be a barrier. We also spend nothing on marketing and grow by word of mouth, so the money other companies spend finding customers goes into a generous free tier instead.

Stampwell's free plan is free forever. It is not a trial; a majority of our organizations never pay a cent.

Yes. Stampwell's free plan is free forever — not a trial. HIPAA and OSHA Bloodborne Pathogens training, certificates, and tracking for up to 25 users at no cost. Most of our organizations never pay a cent.

Stampwell's free plan gives you HIPAA or OSHA Bloodborne Pathogens training, and certificates of training completion for you and your entire team.

No. Stampwell's free plan is free forever, and no credit card is needed to start.

Yes. Individuals and organizations can both get free HIPAA training and certification on Stampwell. There is no paid tier, no upgrade required, and no credit card needed.

Yes. Individuals and organizations can both get free OSHA Bloodborne Pathogens (BBP) training and certification on Stampwell. There is no paid tier, no upgrade required, and no credit card needed.

On Stampwell, a HIPAA certificate costs nothing. Some providers charge anywhere from $20 to $150 for HIPAA certification, but Stampwell Open University is free. We can do that because we spend no money on marketing, thanks to word of mouth from people just like you.

On Stampwell, a Bloodborne Pathogens certification costs nothing. Other providers charge $10 to $45 for an online course, sometimes more for a role-specific version, and since OSHA requires the training every year, that cost repeats annually. Stampwell is free for individuals and organizations, including the exam, the downloadable certificate, and every yearly renewal. We can do that because we spend no money on marketing, thanks to word of mouth from people just like you.

Anywhere from free to about $60,000 in the first year, depending on how big your practice is and how much of the HIPAA work you do yourself. You can build the HIPAA training, write the policies, and keep the records yourself for free. You can run them on Stampwell Pro for a flat yearly price. Or you can hire a HIPAA consultant, and an in-person walkthrough of your office is the one thing only a consultant can do. We wrote up the numbers for each path, and how we got them.

Pro is a flat fee for the year, with no monthly charges. Individuals pay $39 a year. Small teams of up to five pay $79. Larger organizations pay more depending on team size.

No. Stampwell Pro is one flat price for the year, set by the size of your team. $79 covers up to five people. $179 covers up to 25. $579 covers up to 100. You never pay per head.

No. Stampwell Pro is a flat fee, and you never get charged for extras. It includes simply everything: every training program, every compliance document, every single feature.

Stampwell Pro is $39 for the year for a solo provider, with everything Pro includes.

Stampwell Pro is $79 for the year for a small organization, with up to five team members. Perfect for small dermatology practices, dental offices, ABA practices, speech-language pathologists, therapists, and psychologists.

Stampwell Pro is $179 for the year for a medium-sized organization, with up to 25 team members. Perfect for multi-provider dental practices, urgent care clinics, physical therapy groups, and community health centers.

Stampwell Pro is $579 for the year for a large organization, with up to 100 team members. Perfect for multi-location practices, dental service organizations, management services organizations, hospitals, and regional health networks.

Yes. Organizations that need custom pricing and implementation services can benefit from Stampwell Enterprise.

No. Stampwell does not require a contract.

Stampwell bills annually. Organizations and individuals pay one flat fee for the year. For organizations, that one fee covers the entire team.

From your Stampwell dashboard, click any Upgrade to Pro button. The moment checkout is done, your organization has, as we like to say, simply everything.

OSHA (Occupational Safety and Health Administration) and HIPAA (Health Insurance Portability and Accountability Act) are two of the most important federal compliance frameworks in healthcare. OSHA focuses on workplace safety—including Bloodborne Pathogen training—while HIPAA governs the privacy and security of patient health information. Most healthcare organizations must comply with both. Stampwell helps healthcare teams manage OSHA and HIPAA training in one place.

If you handle patient health information at work, yes. HIPAA makes it the organization's responsibility to train every workforce member who touches protected health information, when they are hired and whenever policies change. In a medical, dental, or therapy practice that is nearly everyone, from the front desk and billing to the clinical staff. If you are an employee and your employer has not offered the training, they are required to provide it. The good news is your employer can offer it to the whole team free on Stampwell.

The exact things you need to do vary a bit by your organization type. Generally, however, you should create organizational policies, train your team on HIPAA, appoint a security and privacy officer, and do a risk assessment. You can do all of this on Stampwell. We also broke the whole process down into six simple steps in our guide.

HIPAA requires training for all new employees and retraining whenever policies or procedures change. Most practices train annually to stay current and audit-ready. Stampwell makes it easy to retrain your entire team in minutes.

HIPAA requires covered entities and business associates to train every workforce member on the policies and procedures that apply to their job. Stampwell gives each employee a clear training path through the Privacy Rule, the Security Rule, and the Breach Notification Rule. HIPAA also requires your organization to keep written policies and to have every employee attest to them. Stampwell generates the policies and collects the attestations in seconds.

The three core HIPAA rules are the Privacy Rule, the Security Rule, and the Breach Notification Rule. The Privacy Rule sets the standards for how protected health information (PHI) can be used and disclosed. The Security Rule focuses specifically on electronic PHI (ePHI) and requires administrative, physical, and technical safeguards to protect it. The Breach Notification Rule spells out what your organization must do if a breach occurs, including notifying affected patients, HHS, and in some cases the media. While HIPAA has additional rules like the Enforcement and Omnibus Rules, these three are the ones most healthcare teams interact with day-to-day.

The five main rules of HIPAA are the Privacy Rule, the Security Rule, the Breach Notification Rule, the Enforcement Rule, and the Omnibus Rule.

While there isn't an official golden rule of HIPAA, it might be something like: document everything and don't wing it. This serves two purposes. First, if something goes wrong and you get audited, thorough documentation will help you tremendously. Second, the simple act of documenting makes your patients and team safer.

Everyone on your workforce who has access to protected health information (PHI) — which in most chiropractic practices means everyone. This includes the front desk (scheduling, intake forms), chiropractic assistants (treatment notes, X-rays), billing staff (insurance claims), and the chiropractors themselves. Independent contractors and part-time staff are included. When in doubt, train everyone.

HHS OCR penalties for HIPAA violations reach up to $2.19 million per violation category per year, depending on the level of negligence. Lack of documented workforce training is one of the most common findings in corrective action plans. A free, fully documented training program is the easiest risk to eliminate.

Yes. HIPAA applies regardless of where services are delivered — clinic, home, school, or telehealth. If your RBTs access PHI on tablets or phones in client homes, they need training. BBP training applies to any staff with potential occupational exposure to blood or bodily fluids, including those providing in-home services.

Physician Assistant (PA), Nurse Practitioner (NP), nursing (BSN/MSN/ADN), dental hygiene, physical therapy (PT), occupational therapy (OT), medical laboratory science, health information management, pharmacy, respiratory therapy, and public health programs are the most common. Any program with a clinical component that places students in contact with patient information requires it. Pre-medical students doing research or shadowing often need it as well.

42 CFR Part 2 is a federal regulation that provides additional confidentiality protections for records from substance use disorder treatment programs that are federally assisted — meaning they receive any federal funding, including Medicare or Medicaid reimbursement, or operate under a DEA registration. Part 2 is stricter than HIPAA: it generally prohibits disclosure of SUD treatment records without patient consent, even to other treating providers. If your facility treats substance use disorders and receives any federal assistance, 42 CFR Part 2 almost certainly applies alongside HIPAA.

It depends on whether the facility qualifies as a covered entity — that is, whether it provides healthcare services and transmits health information electronically. Many sober living homes are not covered entities and are not directly subject to HIPAA. However, if a sober living home coordinates care with a treatment provider or handles insurance billing, those activities may bring HIPAA into play. When in doubt, consulting with a healthcare attorney is the right call.

A Business Associate is any vendor, contractor, or partner that creates, receives, maintains, or transmits protected health information (PHI) on behalf of a HIPAA covered entity. Common examples include billing companies, IT service providers, EHR vendors, cloud storage providers, law firms, accounting firms, and answering services. If your work involves access to patient data for a hospital, health plan, or healthcare provider — you are almost certainly a Business Associate.

The list is broad. If your company provides services to a healthcare organization and those services involve any contact with PHI, you are likely a BA. This includes: medical billing and coding companies, health IT and EHR vendors, cloud storage and hosting providers, managed IT service providers and MSPs, legal and accounting firms that handle patient data, transcription services, shredding companies, answering services, claims processors, and consultants. When in doubt, the covered entity's legal team or your own counsel can confirm.

A Business Associate Agreement is a legally required contract between a covered entity and its business associate. It specifies how PHI may be used and disclosed, requires the BA to implement appropriate safeguards, and obligates the BA to report breaches to the covered entity. A covered entity that fails to have a signed BAA in place before sharing PHI with a vendor is itself in violation of HIPAA. Most BAAs explicitly require documented workforce HIPAA training.

Federal law sets the floor: a business associate must follow the HIPAA Security Rule, including a security risk analysis, safeguards for PHI, and security awareness training for its workforce, and must report breaches to the covered entity. Each Business Associate Agreement adds the covered entity's own terms on top. Stampwell covers the training, the policies, and the proof: your team trains for free, signs the policies on their phones, and the audit log holds the records your clients ask for.

Yes. Since the HITECH Act, a business associate is directly liable under HIPAA, not just through its clients. HHS OCR can investigate and fine a business associate on its own for failures under the Security Rule, such as no risk analysis, an untrained workforce, or an unreported breach, and for using PHI beyond what its BAA allows. Penalties reach up to $2.19 million per violation category per year.

The HITECH Act of 2009, put into effect by the HIPAA Omnibus Rule in 2013. Before that, a business associate answered only to its covered entity through the BAA. Since then, HHS OCR can investigate and penalize a business associate directly, and the Security Rule and Breach Notification Rule apply to it in full.

Yes. Since the HITECH Act extended HIPAA enforcement to business associates, HHS OCR has the authority to investigate and fine BAs independently — without going through the covered entity. OCR's audit program explicitly includes business associates. If your organization handles PHI and cannot produce training records, audit logs, or a signed BAA, you are exposed.

A business associate must notify the affected covered entity — or entities — without unreasonable delay and no later than 60 days after discovering the breach. The covered entity then takes responsibility for notifying affected individuals and, if large enough, HHS OCR and the media. However, OCR can also investigate and penalize the BA directly. Documented HIPAA training and written policies are among the first things OCR requests in a breach investigation.

BBP stands for Bloodborne Pathogens. When employers, healthcare facilities, or OSHA documents say BBP training, BBP certification, or a BBP certificate, they mean Bloodborne Pathogens training. The terms are interchangeable. OSHA's Bloodborne Pathogens standard, 29 CFR 1910.1030, is the federal rule that protects workers who could come into contact with blood or other infectious materials on the job. It requires employers to train those workers when they are hired and again every year, to provide protective equipment, to offer the hepatitis B vaccine, and to have a plan for exposures. BBP training teaches how the main bloodborne diseases spread and how to keep from being exposed. A BBP certificate is proof that you completed that training.

If your work could expose you to blood or other potentially infectious materials, yes. OSHA's Bloodborne Pathogens standard (29 CFR 1910.1030) makes it an organization's responsibility to train every employee at risk of exposure, when they are hired and again every year. In a dermatology or dental office that is nearly everyone in the clinical area, and often the front desk too. If you are an employee and your employer has not offered the training, you have the right to it. The good news is your employer can offer it to the whole team free on Stampwell.

Yes. OSHA's Bloodborne Pathogens Standard (29 CFR 1910.1030) requires annual training for workers with reasonably anticipated occupational exposure to blood or other potentially infectious materials. Employers who fail to provide it face OSHA citations and penalties. Individual workers in regulated industries often cannot start work without documented Bloodborne Pathogen training.

OSHA (29 CFR 1910.1030) requires Bloodborne Pathogens training at the time of initial assignment and at least annually thereafter. New tasks with occupational exposure also trigger required retraining.

Stampwell includes HIPAA training and OSHA Bloodborne Pathogens (29 CFR 1910.1030) training, purpose-built for healthcare teams, free for up to 25 users. Need a training program we don't offer? Put in a request or build it yourself. We are building more training programs every day.

No. The HIPAA and OSHA Bloodborne Pathogens courses come ready-made — you assign them, your team trains. Building your own training is there if you ever want it, never something you have to do.

The training adapts to each learner in real time — short sessions that adjust to what each person already knows, on any device. Final exams are graded securely. Passing your exam results in a ledger-verified certificate, automatically created.

No. Your team gets video with captions, audio with text-to-speech, diagrams, and quiz questions, not a wall of text to click through. In fact, many of our Trustpilot reviews specifically say the training is fun and engaging.

Yes — but remember, you never have to. Our courses are world-class out of the box. If you want to customize them, you certainly can.

Yes. Stampwell includes a full course builder — create custom training for new-hire onboarding, standard operating procedures, or anything your practice runs on. Custom courses are assigned, tracked, and certified just like HIPAA and OSHA training.

Most learners complete the Stampwell HIPAA certification in one to three hours (depending on experience level). The program is broken into four short modules followed by a final exam. You can work through it at your own pace: start, pause, and resume whenever it fits your schedule.

Most learners complete the Stampwell Bloodborne Pathogen certification in one to two hours. The program is broken into four short modules followed by a final exam. You can work through it at your own pace: start, pause, and resume whenever it fits your schedule.

No. Stampwell's HIPAA certification is designed to be accessible to anyone working in or around healthcare — regardless of their background. The program is designed to suit all learner types. The training is made up of video (with closed captions), reading (with text-to-speech support), and quiz questions. At Stampwell we are dedicated to ensuring our learning fits a wide range of learning styles. The training is clear and practical, and the exam tests real-world understanding rather than memorization. Most learners pass on their first attempt. You can retake the exam as many times as you need to pass.

No. Stampwell's Bloodborne Pathogen certification is designed to be accessible to anyone working in or near healthcare. The training includes video (with closed captions), reading (with text-to-speech support), and quiz questions designed to suit a wide range of learning styles. The exam tests practical understanding rather than memorization, and you can retake it as many times as you need.

The Stampwell HIPAA final exam has 12 questions and you have 1 hour to complete it. The passing score is 85 percent, but you can retake it as many times as you need. That said, most people complete the HIPAA exam in 10 to 15 minutes. The exam covers the key concepts from all four modules: the Privacy Rule, Security Rule, breach notification, and foundational HIPAA law.

The Stampwell Bloodborne Pathogen final exam has 12 questions and you have 1 hour to complete it. The passing score is 95 percent, but you can retake it as many times as you need. Most learners finish in 10 to 15 minutes. The exam covers the key concepts from all four modules: OSHA requirements, major bloodborne pathogens, exposure control methods, and post-exposure procedures.

Yes. Stampwell is fully online. You can complete your HIPAA training, take the exam, and receive your verifiable certificate entirely from your computer or phone. No software to install, no in-person session required.

Yes. Stampwell is fully online. You can complete your Bloodborne Pathogen training, take the exam, and receive your verifiable certificate entirely from your computer or phone. No software to install, no in-person session required.

Yes. Stampwell offers both HIPAA and OSHA Bloodborne Pathogens certification online. Organizations and solo practitioners can assign both trainings to themselves and their team through a business account. Job seekers can earn both certificates for free through Stampwell Open University.

Stampwell currently supports HIPAA and OSHA Bloodborne Pathogens (29 CFR 1910.1030) certifications, with more modules on the way. Organizations can also create their own certificates: perfect for things like office-specific standard operating procedures.

Yes. The moment your team member passes their final exam, their certificate is generated, verified, and recorded — automatically. No admin action required.

Yes. The moment a team member passes their final exam, a verified certificate is generated and recorded on the Stampwell Certificate Ledger — no admin action required. See our certificates feature for how verification works.

No problem. Stampwell Open University is our free open learning community for individuals: complete your HIPAA and OSHA Bloodborne Pathogens training, pass the exam, and earn a verifiable certificate at no cost.

Yes. Stampwell Open University is our open learning community. For job seekers and students, it is completely free to get your HIPAA compliance certification. One reminder, though: HIPAA compliance is, for the most part, a burden that falls on organizations. If you are a small business, even a business of one, you will want to pursue compliance as an organization. And if your boss or professor says you need a HIPAA certificate, remember that the compliance burden still sits with the organization. Your training can sync to that organization's compliance documentation instantly, but it is often simpler to start by setting up an organization on Stampwell.

Yes. Stampwell Open University is our open learning community. For job seekers and students, it is completely free to get your OSHA Bloodborne Pathogens certification. One reminder, though: under OSHA, this training is the employer's job. The Bloodborne Pathogens standard requires employers to provide it to every worker at risk of exposure, at no cost to the worker and during working hours. If you are a small business with even one employee, you will want to set this up as an organization. And if your boss says you need a Bloodborne Pathogens certificate, remember that the duty still sits with the organization. Your training can sync to that organization's compliance documentation instantly, but it is often simpler to start by setting up an organization on Stampwell.

Stampwell offers two free paths. If you run an organization, set up a free organization account and assign HIPAA training to your entire team. Everyone who passes the exam earns a certificate, issued automatically and recorded on the Stampwell certificate ledger. If you are looking for work in healthcare and want a HIPAA certificate to bolster your resume, join Stampwell Open University, complete the four modules, and pass the exam. Both paths are free, and the whole process takes less than two hours.

Stampwell offers two free paths. If you run an organization, set up a free organization account and assign Bloodborne Pathogens training to your entire team. Everyone who passes the exam earns a certificate, issued automatically and recorded on the Stampwell certificate ledger. If you are looking for work in healthcare and want a Bloodborne Pathogens certificate to bolster your resume, join Stampwell Open University, complete the four modules, and pass the exam. Both paths are free, and the whole process takes less than two hours.

Yes. Everyone who completes training on Stampwell earns a secure, verifiable certificate backed by the Stampwell certificate ledger. One nuance worth knowing: HIPAA does not ask employees to hold a certificate. It asks the organization to train its workforce and keep a record of it. So when your organization assigns the training on Stampwell, each certificate is issued through your organization, with your organization as the origin of the training. You can also tailor the training to your organization, since HIPAA expects a curriculum that fits your practice's own policies and security posture, not one monolithic course. Stampwell verifies it on the ledger, but your organization owns the training, which is what federal law requires.

HIPAA certification is not issued by a government agency — the Department of Health and Human Services (HHS) does not certify individuals or organizations. Instead, certification is issued by training providers like Stampwell. Stampwell certificates are verifiable through our certificate ledger, which provides a unique fingerprint and QR code for each credential.

Yes, especially if you work in healthcare, health tech, medical billing, or any field that involves patient data. Many employers require it before hire. It strengthens your resume and demonstrates professional accountability. On Stampwell, HIPAA training and HIPAA certification are both free.

HIPAA law does not specify a universal expiration period for training certificates. However, the HHS Office for Civil Rights recommends that covered entities retrain employees periodically (typically annually) as policies change. Many employers and licensing boards require annual renewal. Stampwell certificates display the date of issue so you can retrain on your own schedule.

One year. OSHA requires employers to provide Bloodborne Pathogen training at initial assignment and then annually thereafter. This means your certificate should be renewed every year to remain compliant. Stampwell certificates display the date of issue so both you and your employer can track when retraining is due.

Yes. Every Stampwell certificate can be downloaded and printed, published to LinkedIn, or sent to an employer or auditor. It also lives online at its own shareable link, and anyone who opens that link can verify it on the Stampwell certificate ledger.

Yes. Every Stampwell certificate is downloadable, lives online at its own shareable link, and can be published to LinkedIn in one click. Send it to an employer, a client, or a colleague, and anyone who opens the link can verify it on the Stampwell certificate ledger.

Yes. Your admin dashboard shows every certificate across your organization — who's certified, when they were certified, and what's coming up for renewal. Even better, we support full compliance documentation.

Every Stampwell certificate is recorded twice: as a printable certificate for you and your team, and on the Stampwell certificate ledger. Anyone can check a certificate against the ledger, so it can be independently verified and cannot be tampered with.

Yes. Every Stampwell certificate is recorded twice: as a printable certificate for you and your team, and on the Stampwell certificate ledger. An auditor scans the QR code on the certificate and checks it against the ledger, so it can be independently verified and cannot be tampered with.

Yes. Every Stampwell certificate includes a QR code linked directly to the Certificate Ledger. A covered entity's compliance officer, credentialing team, or legal counsel scans it and gets instant verification — no phone calls, no PDFs to chase down, no doubt.

Every Stampwell certificate is ledger-verified. That means server-side exam grading, server-side credential verification, and permanent recording on our Certificate Ledger. Auditors can scan the QR code and validate instantly.

Enter your team's emails. Each person gets their training assignment, and your dashboard tracks progress across the whole organization. Most practices are fully set up in about five minutes.

On Stampwell, you assign HIPAA training by simply adding your staff. Each team member is automatically assigned HIPAA training the moment they are added. The training is free for up to 25 users on your team and takes most people one to three hours. Everyone who passes earns a verifiable certificate that is both downloadable and automatically added to your legally required compliance documentation.

Yes. Paste in every email address at once and Stampwell sends each person a login link. Your whole team is enrolled in one step.

You submit a list of student names and email addresses — nothing else. Stampwell sends each student their training link automatically. Students complete training at their own pace (most finish in under an hour), pass the exam, and receive their certificate. The administrator's dashboard updates in real time. The whole process takes minutes of staff time for any size cohort.

Yes. Your dashboard shows every team member's training, roles, signed policies, and certificates across HIPAA, OSHA, and any module your organization adds. One place, always ready for an audit.

Stampwell provides OSHA Bloodborne Pathogens training (29 CFR 1910.1030) and tracks it for you: completion records, certificates, and renewal reminders, all in your dashboard and ready for an inspection.

Stampwell has dedicated role slots for your HIPAA Security Officer, Privacy Officer, OSHA administrator, and compliance admin. Assign them directly from your dashboard — no paperwork, no separate system. The designation is logged automatically.

An SOP — standard operating procedure — is a written, step-by-step description of how your practice does something: opening the office, handling a phone message about a patient, cleaning a treatment room. Write it down once, and everyone does it the same way.

Yes — and most practices already have them, scattered across binders and shared drives. HIPAA and OSHA both expect written procedures. Putting them in one place, with signatures and training attached, turns them into compliance evidence.

Yes. Stampwell comes with premade HIPAA SOPs covering every core part of the law — the Privacy Rule, the Security Rule, and the Breach Notification Rule. If you want to get started for free, our HIPAA training and certificates are completely free.

Yes. Stampwell comes with a premade OSHA Bloodborne Pathogens Exposure Control Plan, written for your organization and automatically customized to it. If you want to get started for free, our Bloodborne Pathogens training and certificates are completely free.

Yes. Upload the SOPs you already have, or write new ones right on Stampwell. Then send them to your team for signature and turn them into training. Custom SOPs are part of Stampwell Pro — one flat annual price, starting at $39/year for solo providers.

Yes. Build a course from your SOP — bite-sized lessons, quizzes, and a final exam. Stampwell tracks who has completed it and issues certificates when they pass.

Yes. HIPAA and OSHA trainings come ready-made — your team can start today with zero setup. And organizations can add custom trainings too: clinical SOPs, new-hire onboarding, anything your team needs to sign off on.

Yes. Upload or create your employee handbook — or a social media policy, or any policy your practice runs on — and send it to your whole team for signature. Every signature is recorded, and your compliance documentation is generated automatically.

Yes. Every signer is authenticated — logged in, with their identity tied to their email. Every document is fingerprinted, so any change is detectable, and a copy is stored, ready for any audit.

A HIPAA policy is a written document that outlines how your organization protects patient health information and complies with HIPAA regulations. Policies cover areas like who can access PHI, how it's stored and transmitted, how breaches are handled, and how staff are trained. Having clear, written HIPAA policies isn't optional — it's a requirement, and auditors will expect to see them. Well-written policies also give your team a practical guide to follow, which reduces the risk of accidental violations.

Yes. HIPAA applies to covered entities of every size — solo practitioners, small clinics, dental offices, and large hospital systems alike. If you handle protected health information, you need HIPAA policies in place and a workforce that has acknowledged them. Stampwell makes this achievable for small practices in minutes.

HIPAA is the federal law. A HIPAA privacy policy is the written document your organization keeps to comply with it. The policy describes how your organization uses and discloses protected health information, what rights patients have over their records, how to handle a request for access or amendment, and who is responsible for privacy compliance. Stampwell's policy generator writes this document for your organization.

Yes. Stampwell automatically logs everything your compliance program produces: every training completion, every signed policy and employee attestation, and every officer appointment, all timestamped. You can demonstrate compliance during an HHS OCR HIPAA audit or an OSHA inspection, and your records are always ready to download.

Healthcare compliance reporting is the process of documenting that your organization and its workforce meet required regulations—such as HIPAA, OSHA, and Bloodborne Pathogen standards. These reports capture training completion, policy acknowledgments, and audit activity to demonstrate your team is trained and accountable. At Stampwell, our compliance training software generates these documents automatically—so you don't have to spend hours manually tracking completion in spreadsheets.

A HIPAA compliance report is a document you share with an OCR auditor demonstrating exactly what you do to meet federal HIPAA requirements. With Stampwell, you can easily generate detailed reports showing that your workforce has completed the required HIPAA training, including completion dates, exam scores, and certificate validation.

Common types of compliance reports in healthcare include HIPAA training audit logs, OSHA safety training records, bloodborne pathogen compliance documentation (OSHA 29 CFR 1910.1030), Standard Operating Procedure (SOP) acknowledgment records, and team activity reports tracking login history and training progress. Stampwell generates all of these from a single compliance management platform.

With Stampwell, compliance reports are generated automatically as your team completes training. Simply log into your administrator dashboard, click the 'Compliance' tab in the top navigation, and click 'Download'—your report is generated instantly as a real-time snapshot of your team's compliance status. For organizations not yet using Stampwell, you can build compliance reports by maintaining detailed logs of operational workflows, completed training records, and policy acknowledgments.

Stampwell's timestamped completion records and ledger-verified certificates are designed to satisfy the workforce training documentation expectations of health professions accreditors. You can export your full audit log at any time to include in a self-study, site visit binder, or accreditation submission. If your accreditor has a specific documentation format, the export is flexible enough to meet it.

CARF International and The Joint Commission are the two primary accreditation bodies for behavioral health and substance use disorder treatment programs. Both require documented evidence of staff training in HIPAA privacy and security as part of their accreditation standards. State licensing agencies typically impose similar requirements. Stampwell's audit log and certificates give surveyors timestamped proof on demand — no scrambling before an inspection.

Yes. KnowQo is now Stampwell. We renamed the company in 2026. Same team, same software, same free tier. Anything you have read about KnowQo HIPAA compliance software describes Stampwell.