
About Us
Healthcare practices and the organizations that handle patient information with them know HIPAA matters, but aren't always sure where they stand.
Sorticulture Systems was founded by Angela Gillis to make HIPAA feel clear and manageable for busy practices. You get a structured approach, straightforward recommendations, and documentation your team can actually use, without adding unnecessary complexity.

Angela Gillis brings more than 20 years of experience in information management, data governance, and privacy, most of it at Boeing, Microsoft, and Costco. In 12 years at Boeing, she led how sensitive documents, images, and records tied to aircraft design and testing were stored, accessed, and protected, bringing together Legal, IP, IT, and Security teams to close gaps no single team could fix. At Microsoft, she worked in HR data governance, protecting employees' personal information. At Costco, she established enterprise privacy and data governance policies and directed its effort to bring millions of records into compliance with the California Privacy Rights Act. She now brings that same experience to healthcare practices and the software vendors that work with them.
Angela has a M.A. in Information Studies from the University of Wisconsin-Madison, and also holds certificates in Business Administration and Management from the University of Washington and in Change Management from Pepperdine Graziadio Business School. She has also completed the HCCA Healthcare Basic Compliance Academy, and coursework in Information Security & Risk Management from the University of Washington.
Our Mission
Our mission is to help healthcare practices protect patient information with clarity and consistency. We do this by translating HIPAA requirements into practical steps, right-sized safeguards, and documentation that supports your operations and reduces risk.
Because when you know what to do and why it matters, you can protect patients and move forward with confidence.
What We Do
We help healthcare practices, and the organizations that work with patient information alongside them, get and stay compliant with HIPAA. That starts with a clear picture of where you stand, moves into the formal risk assessment and program work HIPAA actually requires, and continues as ongoing support so nothing goes stale as your practice grows. Along the way, we also help with the specific moments that put patient data on the line, like a cyber insurance renewal, an annual training requirement, or a team that needs a plain-language briefing on what's changed. Every price is published, and every engagement starts with a HIPAA Clarity Call.

The Sorticulture Systems Process
Our approach is designed to remove uncertainty, not add complexity.

Get Clarity on Where You Stand
We start by understanding what’s already in place, where expectations are clear, and where uncertainty remains. This creates a shared, accurate picture of your current state.
.png)
Address What Actually Matters
We focus on the areas that create real risk or ongoing doubt, not theoretical requirements or unnecessary extras. Everything is tailored to how your practice actually operates.

Put Structure Around Confidence
We help you document decisions, clarify responsibilities, and establish practices your team can maintain as your practice grows and changes.