Policy templates built for how your organization works.
Downloadable HIPAA, GDPR, and FERPA policy and procedure templates, written by consultants who have served more than 1,000 organizations. Current, complete, and ready to tailor in Microsoft Word.
TPA Compliance Program: Templates, Portal, Training
HIPAA compliance for business associates and third party administrators in one package: Eagle’s policies and procedures, a security risk assessment template, a year of the Eagle Training Portal, a training video, and staff certification.
Save 30% for a limited time with code TPA-30 at checkout
Templates designed for your business processes.
A web host, a billing service, and a data analytics company handle PHI very differently. Depending on the business, some standards apply and others do not, so each template is built around the workflows of a specific type of organization.
IT Managed Service Providers
For MSPs, IT consultants, VARs, and software authors who support healthcare clients.
Third Party Administrators
HIPAA and DOL policies for TPAs that administer health benefit plans. Updated December 2025.
Healthcare Cloud Computing Vendors
For SaaS and cloud vendors that store customer PHI. Mapped to HITRUST and SOC 2 standards.
Medical Billing Companies
Built around billing workflows for companies that serve covered entities.
Health Insurance Brokers
For brokers selling medical, dental, and vision coverage in the group or individual market.
HIPAA/GDPR for Service Providers
One manual for service providers serving both US and EU healthcare organizations.
Healthcare, government, employers and education.
Save 20% for a limited time with code Save-20 at checkout.
Ohio DD Boards
HIPAA, FERPA, IDEA, ORC, and OAC in one set, from the firm that has served 60+ Ohio boards.
Public Health Departments
Policies that fit disease surveillance, immunization programs, and Ohio health district law.
Group Health Plans of Self-Insured Employers
For employers whose self-insured plans are administered by a TPA.
Medical Practices
For practices with 10 physicians or fewer, with implementation and officer checklists.
Tennessee Pain Clinics
Clinical, OSHA, CDC, DEA, and HIPAA policies for pain management clinics.
FERPA for Education SaaS
For cloud and SaaS providers serving school districts, including NY and CT requirements.
Customizable to your risk assessment.
HIPAA policies and procedures are the foundation of any compliance program, and your workforce must be trained on them regularly. Eagle’s experience in HIPAA compliance consulting is built into every template, so you save time and money and can focus on running your organization.
Physician practices, hospitals, and business associates all handle, store, and transmit sensitive data differently. Eagle’s templates are flexible, so you can tailor privacy and security policies to the specific processes and risks identified in your HIPAA risk assessment. Sample business associate agreements are included to speed up contracting.
Don’t see the template you need? Eagle also offers custom HIPAA policies and procedures development.
What working with Eagle is like.
“The work you did for us was extremely valuable in establishing our Board’s HIPAA Privacy and Security policies and procedures. We were able to get everything in order and had a good foundation to build on.”
Eagle client“I appreciate there being someone out there with the amount of experience that he has, especially with County Boards of DD. I anticipated this project to take the whole year. I was impressed with the speed of the completion of the policy customization.”
Eagle clientNeed policies built around your organization?
Eagle can tailor any template to your risk assessment, or write custom policies from the ground up. Call us, or send a note and we will follow up.
Talk to Eagle