Privacy and healthcare attorneys recommend Clearwater to their clients because they know our solutions go deeper and further to protect their clients.


Clearwater has a long history of partnering with the nation’s top privacy and healthcare law firms. With our 100% OCR-Success rate, proven track record working under attorney-client privilege and ability to meet tight deadlines and budgets, your firm can rely on Clearwater to deliver the best solutions for your clients.

Our solutions include:

We work in conjunction with your preferred communication and contracting structure, and deliver the highest quality work when and where it’s needed.

OCR Investigations

Clearwater has a long history of success assisting clients with the detailed work required when preparing for and responding to OCR-investigations.  If your client is under investigation, or is simply preparing for one, we can support you by conducting a detailed assessment of its policies and procedures, reviewing the sufficiency of its risk analysis and compliance gap assessments and sufficiency of its technical testing. Clearwater is experienced working under attorney-client privilege, meeting tight deadlines, and sitting across the able from OCR investigators. Get more information on our OCR-Advisory Services.

Risk Analysis

In many cases, organizations have not performed a bona-fide OCR-quality risk analysis. In this case, Clearwater can quickly assist by deploying its IRM|AnalysisTM SaaS platform and experienced professional services consultants to rapidly complete a risk analysis and deliver a findings and observations report.  Our risk analysis process follows NIST Special Publication 800-30 and fully conforms with OCR’s guidance. For more information visit our Risk Analysis Services page.

Technical Testing

Technical evaluations in the form of penetration testing, vulnerability assessments, web application testing and security awareness assessments are all best practices and required under HIPAA. Clearwater has the expertise and tools at the ready to perform these technical evaluations for your clients, providing them with a report that identifies any issues identified and more importantly recommendations on how to fix them. More information on our Technical Testing Services.

M&A Diligence

Clearwater also provides expert consulting services for assisting companies, private equity firms, and other organizations with HIPAA and cybersecurity diligence during or following a merger or acquisition. Our 10-point Cybersecurity and HIPAA Compliance Assessment provides a broad program review, identifies key gaps and provides a recommended, prioritized, tactical plan to resolve key deficiencies and establish and implement a best-in-class HIPAA Compliance and Cyber Risk Management Program. This assessment is highly attractive as it can be completed in less than 30 days for a fixed cost and delivers a Board-ready executive-level Findings, Observations & Recommendations (FOR) presentation. More information on our M&A Diligence Solutions.

Contact Clearwater to learn more about how we work with law firms.