Call (203) 727-8621

Newtown, CT · HIPAA security for small clinics

Audit-Ready in 21 Days, for One Flat Fee.

Gelmora runs fixed-fee HIPAA security risk assessments, staff phishing training and fix-it roadmaps for independent clinics and dental practices in Newtown, CT and the towns around it. One invoice per engagement. No hourly-rate roulette.

Call the Desk · (203) 727-8621 See the Three Jobs
  • Mon–Fri 10am–5:30pm
  • Billed by invoice
  • Reports in plain English
Overhead view of a clinic desk with a padlock, dental mirror and a checklist on aubergine linen

Walk-through notes · draft

  • ✓Laptops encrypted
  • ✓Backups restore-tested
  • !Fax machine: we need to talk
  • HIPAA Security Rule
  • Risk Analysis
  • Phishing Drills
  • Remediation Roadmaps
  • Business Associate Agreements
  • Backup Restore Tests
  • Router Closets, Inspected

01 · New to Gelmora

Your Practice, Before and After Us

Most clients arrive holding the same three things: a HIPAA binder from a previous decade, a low hum of dread, and a front desk that clicks everything. Here’s the swap.

Before

The Binder Era

  • A risk analysis last touched by someone who has since left, moved, or both.
  • Backups that exist in theory, like a gym membership.
  • Staff training consisting of one PDF and a shared prayer.
  • A fax machine on the network. Because of course.
After

Handover Day

  • A written risk analysis dated this year, signed, and ready for an auditor to nod at.
  • A ranked fix list: these five this month, these eight by spring.
  • A front desk that can smell a fake “your fax is ready” email from across the room.
  • Backups someone has actually restored from, with mild applause.

Not sure which column you’re in? Call. We’ll tell you straight, even if the answer is “you’re fine, go enjoy lunch.”

02 · What We Do

Three Jobs, One Invoice Each

Gelmora is a small, stubborn security shop at 8 Megans Cir in Newtown, CT. We work with independent dental offices, therapy groups and primary-care clinics that have patient data, no IT department, and a sneaking suspicion about the router closet.

Our whole job is to make the HIPAA Security Rule readable, doable and priced like something you can put in a budget. No subscriptions. No dashboard you’ll never log into.

Overhead view of a desk with network diagrams, brass keys and a red pen

  1. HIPAA Security Risk Assessment

    We walk your office, interview your team, poke at your systems and hand you a written risk analysis your auditor will respect: every finding scored, every asset accounted for.

    $2,380Flat, up to 15 workstations. $3,240 for 16–40.

  2. Phishing-Resilience Training

    Two live sessions in your break room, then a month of friendly fake phish aimed at your own inboxes. Nobody gets shamed; everybody gets sharper.

    From $1,150Up to 20 staff. $1,640 for 21–50.

  3. Remediation Roadmap

    The findings, ranked by “fix this Tuesday” through “budget for next spring,” with plain-English steps you or your IT vendor can pick up and run.

    $1,760Flat, included in the bundle below.
All three: $4,790

That’s $500 off for committing to the whole saga. Still one invoice per engagement.

Ask for the Bundle

03 · First Appointment

What to Have on the Table at Kickoff

Nothing fancy. A little homework makes the first call a conversation instead of a scavenger hunt.

  • A list of everyone with a login. Yes, including the part-timer from 2022.
  • The make and model of your router, and where it lives. The closet counts.
  • Your last risk analysis, if one exists. If not, we won’t gasp.
  • The vendors who touch patient data: EHR, billing, imaging, cloud backup.
  • Signed business associate agreements, or the vague memory of them.
  • Forty-five minutes and one person who knows where the keys are.

Coffee optional. Candor required.

04 · The Calendar

Twenty-One Days From Hello to Handover

  1. Day 1

    The Kickoff Call

    Scope, systems, vendors, and who actually owns the Wi-Fi password.

  2. Days 2–9

    The Walk-Through

    We visit around your schedule, before the first patient or over lunch.

  3. Days 10–17

    The Poke and Phish

    Technical checks, staff interviews, and the first friendly fake email.

  4. Day 21

    The Handover

    Signed assessment, ranked roadmap, and a call to walk through both.

05 · Talk to a Person

Pick Up the Phone. A Human Answers.

Aerial view of a small clinic roof and parking lot in autumn

Desk line

(203) 727-8621

Mon–Fri 10am–5:30pm

8 Megans Cir
Newtown, CT 06470
Find the front door →
Tap to Call

06 · Contact

Questions, Quotes, or Quiet Panic

Write it down here, or skip the form and ring us. We read everything ourselves, usually with tea.

Send a Note

Email contact@gelmoracreative.com

Replies within one business day.

Hours
  • Mon–Fri10am–5:30pm
  • Sat–SunResting
We’re only four people. Too small?

Four people with patient data is exactly who HIPAA applies to. Small is our favorite size.

Will you disrupt clinic hours?

No. The walk-through happens before your first patient or over lunch.

What if you find something awful?

You hear it from us first, privately, with a fix attached. Not from an auditor or a ransom note.

How Billing Works

You get one invoice per engagement, with the flat fee quoted in writing before we start. Pay by ACH, check or card.

ACH CHECK VISA