Meet Brian Henderson

I've spent 15+ years in IT and cybersecurity across healthcare, government, education, and startups — including hands-on work as part of a successful HITRUST CSF certification at a national healthcare organization, where I was responsible for endpoint security controls and workforce training. That mix of clinical, enterprise, and public-sector experience is exactly what HIPAA work calls for: knowing how real practices actually run, not just what the regulation says.

I started Copper State Compliance to give small and mid-sized healthcare practices something they rarely get: senior-level compliance expertise, explained in plain English, right-sized to their operation — and delivered independently. I don't sell software or do the remediation work, so when I tell you where you stand, there's no sales pitch hiding inside the advice. Just a clear, honest answer.

I'm proud to be veteran-owned and based right here in Arizona's West Valley, serving practices across the greater Phoenix metro.