Vulnerability scans & penetration tests

Welcome to Accountable

What Accountable does and how this documentation is organized.

Your dashboard

The default view: Things to do, your overview widgets, and how to read your compliance score at a glance.

Quickstart: your first 30 minutes

A short, opinionated path from sign up to your first compliance score.

Set up your organization

Org profile, locations, and roles that everything else builds on.

Meet Compliance Copilot

What Copilot can do, where it shows up, and how to think about it.

Asking Copilot well

Prompts that get the best results across policies, vendors, risk, and reports.

Running a risk assessment

Step through the assessment workflow and document your answers.

Your compliance score

How the score is calculated, what each dimension measures, and what to prioritize.

Data inventory

Document where PHI lives — physically and digitally — across your organization.

Data flow map

Visualize how PHI moves through your organization and its vendors.

The policy library

What's included, how policies map to HIPAA, and how to roll them out.

Customizing policy templates

Edit the language, add your specifics, and keep an audit trail of changes.

Managing your team

Invite employees, assign roles, and handle onboarding and offboarding.

Assigning HIPAA training

Roll out HIPAA training to your team and track completion.

Policy reviews

Track who has acknowledged your policies and follow up with those who haven't.

Adding business associates

Build your vendor inventory and capture what data each one touches.

Generating and tracking BAAs

Send BAAs from Accountable, capture signatures, and track renewals.

Reporting an incident

Capture the facts, document your response, and determine next steps.

Phishing simulation

Baseline your team and run continuous awareness campaigns.

Vulnerability scans & penetration tests

Track vulnerability scans and penetration tests, and turn findings into remediation work.

Remediation plans

Turn security findings into tracked work with owners, deadlines, and evidence.

MFA review

Confirm multi-factor authentication across the apps that touch PHI.

Access controls

Who has access to what, and what changed since you last looked.

Exclusion screening

Screen employees and vendors against federal exclusion databases.

Privacy Center

A public portal for privacy requests from your patients or customers.

Trust Center

Share your compliance posture publicly without sending individual reports.

Compliance reports

What's in each report, when to run them, and how to share them.

Audit log

A complete record of every action taken in your Accountable account.