Clinic email is where scheduling, referrals, and billing collide with PHI. A “HIPAA-compliant email” product sticker does not replace MFA, forwarding audits, or a BAA. SAINT hardens Microsoft 365 or Google Workspace and layers Huntress ITDR — we do not sell certified-email theater.
What we actually turn on
- MFA on every mailbox that can see patient or payment data.
- External sender tags, anti-phishing policies, forwarding-rule audits.
- DMARC moving toward enforcement when DNS is ready.
- Huntress SAT so the front desk recognizes the invoice-redirect lure.
- A written first-hour path: BEC playbook.
Therapy-specific: behavioral health and HIPAA IT for therapy practices. Dental: dental. Chiropractic: chiropractic. Program page: /email-security.
Lincoln and Omaha clinics: Hickman-based service-area team, no storefront. 531-625-2111.