Last updated: 2026-09-21
Two numbers decide this purchase, and only one of them shows up on a rate card. How hourly pricing works for a HIPAA safeguarded virtual assistant is the first, because the weekly hour count and the rate band carry the whole arithmetic. Why the same arrangement costs more to set up than to run is the second, since most of the compliance work lands before the first billable hour rather than spreading itself across the year. What a signed Business Associate Agreement adds to the engagement comes next, and it moves the obligation rather than the invoice. When a practice should move a part-time assistant to full time follows, with the arithmetic for each and the case for stopping short of it. What an unsigned agreement puts at risk is the boundary this page won't blur, because HIPAA obligations apply to your practice whether or not anybody signs. Where these pricing figures come from closes the page, together with the numbers left off it on purpose.
Pricing works as plain multiplication at Honest Taskers, since the weekly hour count times a rate of $10.00 to $12.65 an hour produces the monthly bill. Safeguards don't get their own line. Quarterly HIPAA training, remote work screening and a signed Business Associate Agreement are conditions the engagement runs under, and the only price Honest Taskers publishes is that hourly range, so the comparison between two quotes comes down to hours, rate and what each firm puts in writing.
Four weeks to a month is the basis for every figure in the table, with the low end of each range worked at $10.00 an hour and the high end at $12.65.
| Hours a week | Hours a month | Monthly range | Scope a block at that level holds |
|---|---|---|---|
| 10 | 40 | $400 to $506 | One queue that reaches protected health information, such as insurance eligibility checks |
| 15 | 60 | $600 to $759 | One queue plus the inbound fax and records-request tray |
| 20 | 80 | $800 to $1,012 | Two queues on one provider's panel, inside one system grant |
| 30 | 120 | $1,200 to $1,518 | Most of the working day for a small practice, across two or three modules |
| 40 | 160 | $1,600 to $2,024 | A full-time seat pointed at one time zone and one access profile |
Where a placement lands inside that band moves with the candidate's healthcare experience, education, location, role, specialty, language, schedule, part-time or full-time status and the qualifications the role calls for. A bilingual intake role with three years of prior authorization work behind it doesn't price like a records-tray role. Nobody should read the bottom of the range as a quote for every position.
Buying hours rather than a package has one consequence worth naming before the compliance arithmetic starts. Adding five hours costs five hours at the same rate, and the system access behind those hours doesn't change, so a practice that guessed low can widen the block without reopening anything. Widening the scope is a different move, and that one does reopen things, which is the distinction the rest of this page turns on. Budgeting for a remote administrative seat more broadly, including the practice-side items that never reach an hourly invoice, sits in our guide to virtual medical assistant cost.
Setup costs more because nearly all the compliance work is front-loaded. The agreement, the screening, the account grants and the scoping happen once, before the first billable hour, and what runs afterward is a rate times hours plus a training cadence somebody else operates. Most pricing pages skip this, and it's the part that surprises a practice manager in week one.
Five things get done before anyone opens a chart, and each of them is somebody's working time.
What repeats after that is thinner. Honest Taskers puts its Virtual Healthcare Assistants through quarterly HIPAA training and quarterly data privacy training under a dedicated HIPAA compliance officer, and HIPAA compliance is verified by Accountable, so the training clock runs on the company's side rather than yours. Your recurring half is an access review, and quarterly suits most practices: pull a sample of the access log, check that the records opened match the work assigned, ask whether the role still needs every grant it holds, and close what it doesn't.
None of the front-loaded work arrives as a separate charge, which is exactly why it gets missed. It arrives as your practice manager's hours, as an afternoon with your electronic health record vendor setting session timeouts, and as a policy document somebody has to write once. Count that as the real setup cost and the hourly rate stops looking like the whole picture. The practice-side items worth working through before the first shift are collected in our remote staff HIPAA compliance checklist.
Terms outside the hourly range belong in the written agreement, and that's where to settle them. Ask what the billing cycle is, what notice either side gives, whether any weekly minimum applies to the role you're buying, and what happens to accounts and devices when the engagement ends. Answered before the first shift, those four questions cost a conversation. Left until something goes wrong, they cost a great deal more than that.
A signed Business Associate Agreement adds a contract between two organizations to an arrangement that otherwise rests on training records. Your practice is the covered entity. A staffing company whose professionals handle protected health information on your behalf becomes a business associate, and the agreement is where each side's undertakings are written down and where the consequence sits when something slips.
Read the document for five things before it goes in a folder.
The US Department of Health and Human Services publishes the Privacy, Security and Breach Notification Rules along with the business associate guidance behind them. Its HIPAA rules hub is the material to read before any vendor's compliance page, because a vendor page describes a product and the rules describe an obligation.
Honest Taskers signs a Business Associate Agreement with healthcare clients when the professional will access protected health information, which is the timing above rather than a promise to circle back. Professionals complete quarterly HIPAA and data privacy training under a dedicated HIPAA compliance officer, and Honest Taskers Academy issues a HIPAA training certificate of completion. That certificate records training a person finished. It doesn't confer a compliance status on anyone, and it doesn't stand in for the agreement, because compliance rests with the covered entity and its business associates and HIPAA describes safeguards rather than guarantees.
On price, the agreement is the part a managed arrangement carries at the company level that an hourly marketplace listing leaves to you. Signing one firm-level agreement covering every professional it places beats chasing a separate document per freelancer, and it puts replacement inside the same paper: unlimited replacement support applies, with a performance-related replacement qualifying in some cases for a credit covering the incoming professional's first two weeks. The same five clauses appear in plainer language in our explainer on the business associate agreement.
Move to full time once the queues already inside the person's access profile run past the hours you've bought, and not before the second test is answered: whether the next batch of work needs system access the assistant doesn't hold. Hours and scope are separate questions, and only the first one is priced by the hour.
Twenty hours a week comes to about $800 to $1,012 a month at $10.00 to $12.65 an hour, figured at four weeks. Forty hours a week comes to about $1,600 to $2,024. The bill doubles and the compliance overhead doesn't, because the agreement is signed, the workspace passed screening, the accounts exist and the minimum necessary pass has already been made. That asymmetry is the strongest argument for adding hours to a person you've already onboarded rather than starting somebody new at ten hours a week.
More hours stops being the right answer at the point where the extra work lives in a system the assistant can't open today. Handing an intake role the billing module widens the footprint of protected health information, and every new grant is another line in the access review, another recertification each quarter and another account to close on the day that person leaves. Price the grant, not the hour. A practice that adds ten hours and three modules in the same week has made a compliance decision and recorded it as a scheduling one.
Weighing full time against a local hire is the comparison most practices want, and public wage data gives it a defensible floor. The Bureau of Labor Statistics puts the median hourly wage for medical secretaries and administrative assistants, occupation code 43-6013, at $22.08 in its "Occupational Employment and Wage Statistics" release for May 2025. Wages aren't the whole employer cost either. Its "Employer Costs for Employee Compensation" series records benefits at $14.01 an hour against $32.60 in wages for private industry workers, roughly 43 percent added on top of pay (Source: U.S. Bureau of Labor Statistics, March 2026). Run both against your own local wage rather than a national median, and our virtual assistant vs in-house employee cost comparison lays the two side by side.
Turnover is the variable that quietly sets the price of either option, because every departure restarts the screening, the grants and the revocation. Honest Taskers reports 99.6% average monthly retention, and the programs behind that number include healthcare coverage for eligible team members, interest-free loans, wellness care packages, yearly performance-based raises and continuing training. Most placements complete within one to three weeks of a signed agreement. New clients may receive a two-week working trial with their first selected professional, subject to current service terms, and predictable schedules attract stronger candidates than a rota built out of scraps, which is worth remembering before splitting forty hours into four awkward blocks.
An unsigned Business Associate Agreement puts the arrangement outside the boundary where protected health information can travel at all, so the plain answer is that the work shouldn't touch PHI until the agreement exists. Access is the trigger. Somebody drafting recall copy who never opens a chart sits outside the requirement, and the moment that person handles an eligibility check, a referral note or a records release, the agreement should already be signed.
The obligation doesn't transfer either, and that's the half buyers skip. Your practice is the covered entity before the engagement, during it and after it ends. A staffing firm can undertake safeguards, screen a workspace, train its people and sign what it signs, and none of that moves your position under the rule onto somebody else's balance sheet. Compliance rests with the covered entity and its business associates together.
This page carries no penalty figure, no enforcement statistic and no notification deadline, and that's deliberate rather than an oversight. Whether an incident meets the definition of a reportable breach, who has to be told and on what timetable are determinations for your practice and its own counsel under your own incident policy. Read the HHS material named above, then ask your attorney about your situation, because a pricing page can't see your policy, your systems or your facts.
Name the limits of what any staffing arrangement buys, too. Honest Taskers describes its security environment as SOC 2 audit ready. That's a posture, not a completed examination. HIPAA compliance is verified by Accountable, which is a separate third-party check and the one worth asking any firm to name. Professionals here are HIPAA-trained rather than compliance objects, they do administrative and clinically adjacent work, and none of them gives clinical advice or makes a clinical decision. Recruiting runs across the Philippines, Latin America, India and Pakistan, and professionals work the client's US time zone and approved schedule rather than their own.
Offshore delivery raises its own question, and it deserves a direct answer rather than a reassurance. Ask who signs, whether any part of the work sits with a subcontractor, whether that subcontractor is covered, and how the safeguards get verified when the workstation is eight time zones away. A firm that answers those four without hesitation has thought about the structure, and our piece on offshore virtual assistant access to PHI works through the same ground.
Honest Taskers rates, billing terms, training cadence, screening requirements, BAA timing, trial terms, placement timelines, replacement support, recruiting geography and security posture come from the company's own published rate card and service terms (Honest Taskers, 2026). Accountable is the third party named as verifying its HIPAA compliance. Every monthly figure above is arithmetic on the published hourly range at four weeks to a month, so treat each one as arithmetic rather than as a quote for your practice. The safeguard families, the business associate contract requirements and the minimum necessary standard come from the US Department of Health and Human Services, which publishes the HIPAA Privacy, Security and Breach Notification Rules.
Wage context comes from the Bureau of Labor Statistics, whose "Occupational Employment and Wage Statistics" release for May 2025 puts median hourly pay for medical secretaries and administrative assistants at $22.08, occupation code 43-6013. Employer load comes from the same agency's "Employer Costs for Employee Compensation" series for March 2026 (Source: U.S. Bureau of Labor Statistics, March 2026). No savings percentage appears anywhere on this page, and that's a choice rather than a gap, since a percentage would have to assume your wage, your benefit load, your hours and which of your tasks move at all. Competitor rate cards are left out for the same reason: they're self-published, unaudited and they change without notice. No breach count, fine, audit statistic or client case study appears above, because each of those turns on facts a pricing page can't see from here.
Once the hours are sized and the agreement questions are settled, the next job is a shortlist, and the firms in this market differ most on what they commit to in writing rather than on a dollar an hour. Hardly any firm in this market publishes a rate at all. A few name a signed agreement in their own words, while others offer a training badge and leave the contract unmentioned. Who publishes what is set out in our ranking of HIPAA-safeguarded virtual assistant companies, so the same four questions about signatures, subcontractors and verification can go to each firm in the same order.
Speak with Honest Taskers about a safeguarded remote support block for your practice.
