One engagement. The technology and the evidence.
Most practices that come to us are already paying two vendors: an IT company that secures the network but cannot produce a risk analysis, and a compliance consultant who produces paperwork but does not touch the technology. Paying for both usually produces neither.
Managed IT and help desk
The day-to-day. Tickets answered by a named pod, not a rotating queue.
Cybersecurity and 24/7 detection and response
24/7 monitored detection with contractual authority to contain, not just to alert.
HIPAA compliance program
The risk analysis, the risk management plan, and the evidence file. The flagship.
vCISO
A named security officer with a monthly working session and a quarterly board report.
Backup and disaster recovery
Immutable, offsite, and restore-tested quarterly with the timings written down.
Cloud and Microsoft 365
Tenant hardening, conditional access, and the licensing conversation nobody has had with you.
Practice acquisition and integration
Diligence before the deal, integration after the close, one standard going forward.
Co-managed IT
For groups with one internal IT person who is doing the work of four.
Three tiers. Descriptive names, published rates.
No “Onyx Partnership,” no “Total CommITment.” Branded tier names raise perceived value and force you to learn a vocabulary before you can compare us to anyone else, which is the point of them.
Chartline Core
Managed IT with a security baseline.
$135/ user / month
15-user minimum · 36-month term
Help desk, patching, EDR, Microsoft 365, enforced MFA, immutable backup, and the asset inventory. Everything a practice needs to be running and defensible.
What is in CoreChartline Secure
Everything in Core, plus 24/7 detection and response.
$189/ user / month
15-user minimum · 36-month term
For practices whose carrier, payer, or health-system affiliate has started asking questions. Containment authority, log retention, segmentation, and the exposure monitoring that finds what a scanner does not.
What is in SecureChartline Compliant
Everything in Secure, plus the HIPAA program and the evidence file.
$255/ user / month
25-user minimum · 36-month term
The security program and the paper trail that proves it existed. A named security officer, a real risk analysis, a dated remediation plan, and an evidence file built for an OCR data request.
What is in CompliantTwo exclusions worth stating.
We do not sell support only. Help desk without enforced MFA, EDR on servers, and restore-tested immutable backup creates a liability we will not carry and a client we cannot defend. Chartline Core is the floor.
We do not do EHR selection, implementation, or optimization. We integrate with your EHR partners; we do not replace them. Choosing a practice management system and configuring clinical workflows is a different discipline, and a firm that claims both is usually good at neither.
The full list of situations where we decline an engagement is on the who we are not a good fit for page.