About

I’m Sam Roberts, founder of DermHIPAA.

I’ve been supporting Google Workspace at derm practices for more than 10 years, and supporting technology at medical offices in general for more than 18 years.

My own dad was a doctor, and one of my first jobs was to run his office. I understand the unique compliance and security needs of dermatology businesses and look forward to handling yours with care.

Why DermHIPAA exists

You probably already have some HIPAA paperwork, in a binder or a compliance tool. What you don’t have is someone doing the work: the risk assessment followed through, the policies kept current, the vendor agreements chased, the training tracked, and a Google Workspace that actually matches the policies. The policy says former employees lose access the day they leave; the admin console still has them signed in.

At a busy practice, that work is nobody’s job, and it isn’t your IT company’s either. It is a different job, on a different clock, and it never finishes. So DermHIPAA does it with you, every day, and writes down what it did.

Who does the work

We are a small but strong delivery team that does the daily, weekly, monthly and quarterly work from written checklists and best-practice playbooks. Every client can reach me directly, but you will also enjoy working with the tight-knit team who work with me.

Our own security standards

Since we are administering your Google Workspace, which can hold patient information, we become your business associate and sign a business associate agreement with you. We run our own HIPAA program for ourselves and can provide evidence of our own compliance. We carry cyber-liability and technology errors-and-omissions insurance.

We will never tell you that you are “HIPAA certified”. There is no such thing. What we promise is to do the work we agree with you, and to show you the evidence.