Pricing
Three plans, from your email records to your whole HIPAA program
One monthly price for each plan, set by how many Google Workspace users you have. Every plan comes with our business associate agreement, a twelve-month first term, then month to month.
We count paid Google Workspace licenses. We never charge for free Cloud Identity accounts, including the one we use to look after your Google Workspace.
Your price, at 40 users
- Email Security$197 a monthOne flat price. No setup fee.
- Workspace Security$497 a month$497 for up to 50 users, then $5 for each user above 50. Setup from $1,997.
- HIPAA Compliance$997 a month$997 for up to 50 users, then $10 for each user above 50. Setup from $4,997.
At 100 users the three read $197, $747 and $1,497.
Email Security
$197 a month
For practices that want to stop forged email and start monitoring for abuse. Once your DMARC record reaches reject, most mailbox providers will turn away email forged with your practice’s address, or send it to spam. For each service that sends email for you, we send you or your IT company the steps to get its DKIM record, then publish it in your DNS so its email passes DMARC. We read your DMARC reports every week, send you an alert within a business day if something breaks, and drop a summary report in your inbox each month.
No setup fee. Any Google Workspace edition.
Workspace Security
from $497 a month
For practices that want a professional admin to run Google Workspace on a daily basis, but don’t need help with HIPAA compliance. Everything in Email Security, plus: all security settings updated and maintained within Google Workspace; on/offboarding within Google Workspace; data loss prevention (DLP) rules and Context-Aware Access configured, on Google Workspace Enterprise Standard or above; sharing, logs and alerts watched; incident response within one business hour; a monthly report, and an access review every quarter.
Setup from $1,997. Any Google Workspace edition.
HIPAA Compliance
from $997 a month
For practices that want their whole HIPAA program run with them. Everything in Workspace Security, plus: your risk assessment, policies and vendor agreements, kept current; every recurring HIPAA task followed up until it’s done and recorded; your Google Workspace audit logs and an “evidence pack” uploaded to your own Shared Drive, and a written review every quarter.
Setup from $4,997. Google Workspace Business Plus or above.
Not sure where to start?
Check your email records free, in a few seconds.
If the results show that your email records are not configured for email security, we’ll fix them with you (also for free) on a 30-minute call.
Compare the plans
| What we do | Email Security | Workspace Security | HIPAA Compliance |
|---|---|---|---|
| Email records set up and kept right: SPF, DKIM, DMARC taken to reject, MTA-STS | Yes | Yes | Yes |
| Your email records checked every day, with an alert within one business day if something breaks | Yes | Yes | Yes |
| Your domain’s registration and your website’s certificate watched, with a warning before either runs out | Yes | Yes | Yes |
| Who sends email as you, and anyone forging your address, reviewed every week | Yes | Yes | Yes |
| Gmail’s settings in Google Workspace configured for attachments, links and spoofing | Yes | Yes | Yes |
| Google Workspace | |||
| Your Google Workspace run by experts every business day: on/offboarding, 2-Step Verification, groups, licensing and more | Not included | Yes | Yes |
| Setup questions, a few minutes a week: your answers set your Google Workspace, and on HIPAA Compliance your policies too | Not included | Yes | Yes |
| All security settings brought to our written standard and kept there | Not included | Yes | Yes |
| Data loss prevention and Context-Aware Access rules, on Enterprise editions | Not included | Yes | Yes |
| Google’s security alerts received and reviewed | Not included | Yes | Yes |
| Activity reviewed every business day, and the logs saved before Google deletes them: sign-ins, admin changes, new accounts and apps | Not included | Yes | Yes |
| Files shared outside the practice watched | Not included | Yes | Yes |
| Phone policy set in the Admin console: passcode, blocking a device, removing your account from a lost phone | Not included | Yes | Yes |
| Access reviews every quarter; yearly reviews of connected apps, admin roles and sharing | Not included | Yes | Yes |
| Incident response within one business hour | Not included | Yes | Yes |
| Your HIPAA program | |||
| Your security risk assessment, the full set of policies, and vendor agreements, all gathered and finalized with you | Not included | Not included | Yes |
| Your IT company’s checks on every computer and device, on a schedule we keep and record | Not included | Not included | Yes |
| Incident response and contingency plans, written | Not included | Not included | Yes |
| Phishing tests twice a year, with the results to your leadership | Not included | Not included | Yes |
| The evidence pack in your own Shared Drive | Not included | Not included | Yes |
| A written review every quarter, and a yearly meeting with leadership | Not included | Not included | Yes |
| Reports and terms | |||
| Monthly report | A short email: DMARC and email security | A full report: Google Workspace security | A full report, with how many of the 27 safeguards are in place |
| Setup | None | From $1,997 | From $4,997 |
| Google Workspace edition | Any | Any | Business Plus or above |
| Our business associate agreement | Yes | Yes | Yes |
| Google’s business associate agreement accepted for your Google Workspace | Yes | Yes | Yes |
We configure device policy. We don’t support devices. On every plan, your IT company continues to cover support for staff, sign-ins, devices, and apps.
Paid to your vendors, not to us
You pay these directly, at their prices.
- Google Workspace, which you already pay for. Business Plus is the minimum for HIPAA Compliance; we recommend Enterprise Standard. The other two plans work on any edition.
- Paubox for encrypted email, if you choose it.
- IDrive for backup, if you choose it.
- Training courses, if you choose paid ones. Free ones work too.
How billing works
- Setup is due at signing, and quoted once we have looked at your Google Workspace. Email Security has none: its first month is paid at signing.
- The monthly invoice goes out on the 1st, starting the month after you sign, with no proration.
- Every plan has a twelve-month first term, then month to month.
- Moving up from Email Security or Workspace Security ends the lower plan with no fee, even inside its first twelve months.
- HIPAA Compliance: the first security risk assessment is part of setup. The yearly renewal is its own line, at half price while you subscribe.
Want to know what setup would cost you?
Book a call. If we’re a good fit, you’ll know your setup fee before we hang up.