Healthcare cybersecurity · HIPAA compliance software
Compliancy Group
Compliancy Group is HIPAA compliance software that runs risk assessments, policies, training, vendor agreements, and incident tracking, with coding and documentation audits through Audit Manager+.
Strong fit
- Practices, business associates, and groups that need a full HIPAA compliance program
- Organizations that want training, risk assessments, and vendor agreements in one place
- Teams that want coding and documentation audits on the same platform
Weak fit
- Hospitals that need managed security monitoring
- Buyers who want a published price
- Compliance teams that only need one narrow tool
Bottom line
Compliancy Group runs HIPAA compliance programs in software called The Guard, with help from its own compliance staff. It suits practices and business associates that want policies, training, risk assessments, and vendor agreements in one place. Pricing is quoted, so ask early.
Score breakdown
Weights: Outcomes 35% · Product 30% · Implementation 20% · Pricing clarity 15%.
Compliancy Group is based in McLean, Virginia, and has worked in healthcare compliance for more than 20 years. Crispin Vary leads it as CEO, and growth equity firm Aldrich Capital Partners backs it. In June 2026 it bought Healthicity, a maker of compliance and auditing software.
Its software, The Guard, walks an organization through HIPAA risk assessments, policies, staff training, vendor business associate agreements, and incident tracking. Progress rolls up into one compliance score. Onboarding ranges from self-serve to one-on-one help from its compliance staff.
The Healthicity deal added Audit Manager+ for provider, coding, and documentation audits. Compliancy Group says Healthicity customers keep their products, contracts, and support during the merger.
Compliancy Group is rated 4.8 out of 5 on G2 and 4.9 on Capterra. A customer quoted on its site says setup took about 15 hours, against an easy 80 hours without The Guard.
Abyde fits small practices that want a lower, published monthly price and both HIPAA and OSHA programs. Clearwater fits mid-sized groups and health systems that want risk analysis with consulting and incident response. Defendify fits organizations that also need threat detection and security testing.
Competitor landscape
| Vendor | Overall | Ease of implementation |
|---|---|---|
| Clearwater | 7.6 | 7.2 |
| Defendify | 7.6 | 7.4 |
| Compliancy Group | 7.3 | 7.5 |
| Abyde | 7.0 | 7.5 |
Pricing
| Item | Detail |
|---|---|
| Model | Compliancy Group quotes a subscription for each organization. |
| What usually drives cost | For Compliancy Group, cost depends on your organization type and size, the number of locations and staff, your onboarding package, and whether you add Audit Manager+ for coding and documentation audits. |
| What to ask before you buy | Ask Compliancy Group for the yearly cost, whether an association discount applies, and how much one-on-one help comes with onboarding. |
| Note | Compliancy Group offers member discounts through partner associations. |
| Published pricing | Compliancy Group does not publish a price list. |
Methodology
| Weight | Factor | What it measures |
|---|---|---|
| 35% | Customer outcomes | Whether buyers get measurable operational or clinical-workflow results after go-live |
| 30% | Product | Capability depth, reliability, and fit for the job the category buys |
| 20% | Implementation | How hard it is to stand up, integrate, train, and stabilize |
| 15% | Pricing clarity | Whether a buyer can model total cost without a mystery quote |
| Label | Meaning |
|---|---|
| Highly recommend | Strong outcomes and product with manageable caveats |
| Recommend | Solid fit for the right buyer; know the tradeoffs |
| Conditional | Only with a specific use case or heavy caveats |
| Not recommended | Avoid for most buyers in this category |
Read our full methodology for how we weight scores and assign recommend labels.