SecureGRC is a low-cost security and risk assessment, auditing and remediation application. The tool offers HIPAA/HITECH and PCI compliancy for medical providers and their business associates. The cool thing about eGestalt is that it requires no prior knowledge of HIPAA rules. Users can dive right in. SecureGRC comes in Enterprise and Small Business flavors. All data is stored in a SAS 70 Type II secure data center and no electronic records are removed from the client site.