These cookies are required for the website to function properly. They ensure security, enable basic features like page navigation, and store user session data. You cannot disable these cookies.
- HIPAA Compliance Manager
- Data model
The tables behind HIPAA Compliance Manager
HIPAA Compliance Manager ships with 15 tables, grouped here by the feature that uses them. Every record your team works with lives in one of them, and you can add fields and tables in Proto.
- Tables
- 15
- Features
- 6, plus shared settings
- Change it
- Add fields and tables in Proto
How the model is organised
Assessment work
Assessments anchors assessment tests, Risks, privacy incidents, review decisions and Retests.
Organization follow-up
Organizations anchors Findings, corrective actions, record attachments and operation receipts.
People and controls
Team members links owners and reviewers to Users; Controls carries verification material and effective dates.
Rates
Exchange rates stores effective currency rates.
Every table, by feature
- Assessments2
- Control evidence3
- Findings and actions3
- Review decisions3
- Incidents and risks3
- Records and receipts4
- Shared and settings2
- Assessments
Assessment periods and their operational state
Linked to Organizations, Team members - Assessment tests
Measured assessment test results
Linked to Assessments, Team members
- Controls
Verified controls
Linked to Team members - Findings
Findings over assessed scope
Linked to Organizations, Team members - Team members
Team members and their roles
Linked to Users
- Findings
Findings over assessed scope
Linked to Organizations, Team members - Corrective actions
Follow-up corrective actions
Linked to Organizations, Team members - Organizations
Organization identity and status
Linked to Team members
- Review decisions
Attributed review decision documentation
Linked to Assessments, Team members - Assessments
Assessment periods and their operational state
Linked to Organizations, Team members - Team members
Team members and their roles
Linked to Users
- Privacy incidents
Privacy incidents and their processing state
Linked to Assessments - Risks
Domain risks with owner and quantity
Linked to Assessments, Team members - Assessments
Assessment periods and their operational state
Linked to Organizations, Team members
- Organizations
Organization identity and status
Linked to Team members - Record attachments
Purpose-specific record attachments
Linked to Organizations - Operation receipts
Operation receipts received
Linked to Organizations - Retests
Retest records for assessments
Linked to Assessments
Keys and references
Parent on assessment tests, privacy incidents and review decisions points to Assessments. Assessment on Risks and Retests points to Assessments. Organization on Assessments, Findings and corrective actions points to Organizations. Parent on attachments and receipts points to Organizations. Owner and Reviewer point to team members where the record declares them.
Migration order
- People. Load Users, then team members.
- Organizations. Load Organizations and check owners.
- Core work. Load Assessments with organization and owner references; load Controls with their owner references.
- Related records. Load tests, risks, incidents, decisions, findings, actions, attachments, receipts and retests after their parent exists.
- Check links. Open a case and inspect each related record before relying on reports.
Set up HIPAA Compliance Manager your way.
Start free, then use Proto to change fields, steps and approvals before your team goes live.