LetterStream and HIPAA

At LetterStream, each employee goes through third-party training on a recurring basis to earn an individual HIPAA Certificate for Business Associates as well as a Medicare Part D training certificate.  These certificates are on file in the event of an audit but are not generally shared because they have the names of each employee on them.

There is no such thing as a true HIPAA certification for a business.  The US Department of Health and Human Services says "The HIPAA Rules are flexible and scalable to accommodate the enormous range in types and sizes of entities that must comply with them. This means that there is no single standardized program that could appropriately train employees of all entities."  ( https://www.hhs.gov/hipaa/for-professionals/training/index.html)

HIPAA certificates of various types are available for individuals to receive based on various training programs.