Skip to main content
Nona Clinical IT
Resources

Plain-English guides on compliant IT.

No fear-mongering, no jargon — just what HIPAA-grade IT, Microsoft 365, and clinical-research technology actually require, from the people who do it every day.

What a BAA Actually Covers (and What It Doesn't)

Every IT vendor that touches your patient data should sign a Business Associate Agreement. Most practices know that much. What surprises them is how many vend

Read →

The Microsoft 365 HIPAA Checklist Most Practices Fail

Microsoft 365 can be HIPAA-compliant. Out of the box, it usually isn't — compliance lives in the configuration, not the subscription. Here's the checklist we

Read →

Buying Microsoft 365 from GoDaddy vs. a Real Partner: What Your Practice Gives Up

Thousands of small practices bought Microsoft 365 the easy way — bundled with their domain at GoDaddy or another web host. It worked on day one. Years later,

Read →

HIPAA IT Support in Orlando: What "Compliant IT" Should Actually Look Like

Most Orlando IT companies will tell you they "work with medical offices." Ask the follow-up — show me the BAA you'd sign, the license you'd put my staff on, a

Read →

IT for Clinical Research Sites: Why Your MSP Doesn't Get It

A clinical research site is not a doctor's office with extra paperwork. It's a small business that must simultaneously satisfy HIPAA, GCP, sponsor audits, and

Read →

Former-Employee Mailboxes: The License Money Your Practice Is Burning

Open your Microsoft 365 billing page and count the licenses. Now count the people who actually work for you. At almost every practice we audit, the first numb

Read →