HENRICO, VA (March 31, 2026) – Virginia Community Healthcare Association (VCHA) is excited to announce a new strategic partnership with Medcurity, a healthcare-focused HIPAA compliance and cybersecurity firm, to support our member health centers with strengthening their compliance programs and reducing organizational risk.

Through this partnership, VCHA members will receive preferred pricing on Medcurity’s full suite of services, including Security Risk Analyses (SRA), Network Vulnerability Assessments, HIPAA training through Medcurity Academy and ongoing compliance support. The partnership is designed to provide health centers with a more practical, supported approach to meeting HIPAA requirements while managing limited internal resources.
“Our role at VCHA is to anticipate the challenges facing Virginia’s community health centers and connect our members with partners who truly understand those realities,” said Tracy Douglas, VCHA Chief Executive Officer. “By bringing Medcurity into our GPO, we’re giving our members access to practical expertise and scalable support that can strengthen their compliance efforts without stretching their already-limited resources.”
Medcurity was founded by CEO Joe Gellatly after years of working alongside healthcare organizations navigating complex compliance requirements and increasing cybersecurity threats. Recognizing that many organizations were overwhelmed by manual processes, unclear guidance, and limited support, he set out to build a solution that simplifies compliance while delivering meaningful, real-world risk management.
“Virginia’s community health centers do incredibly important work and we’re proud to support them with the tools they need to strengthen privacy, security, and compliance,” said Gellatly. “Through this partnership, we can help more health centers across the Commonwealth protect their patients, fulfill their HIPAA Security Risk Analysis and training requirements.”
Today, Medcurity combines an intelligent compliance platform with hands-on service, helping organizations not only complete their Security Risk Analysis but actively manage risk throughout the year. Health centers benefit from guided support, a centralized platform for tracking remediation, and access to a full policy library designed to streamline compliance efforts and reduce administrative burden.
By partnering with Medcurity, VCHA is expanding the resources available to its members, offering a trusted solution that aligns with the evolving expectations of regulators and the increasing importance of cybersecurity in healthcare environments.
Health centers interested in learning more about this partnership and available services are encouraged to connect directly with Medcurity to explore how these solutions can support their organization.
About Virginia Community Healthcare Association
Virginia Community Healthcare Association (VCHA), established in 1980, is a non-profit membership organization that serves as the primary care association for Virginia’s community health centers and look-alike health centers. VCHA’s mission is to advocate on behalf of, educate and elevate our member health centers by enhancing their ability to provide affordable, accessible, quality healthcare to the communities they serve regardless of their ability to pay. For more information, visit www.vcha.org.