The decision
HIPAA training is one part of preparing a remote worker. The practice also needs appropriate agreements, processes and technical safeguards for the proposed access. A training certificate does not establish that every part of an engagement is compliant.
What to compare
Use the HHS business-associate guidance as the starting point for your organisation's review. Ask the provider about the applicable BAA, subcontractors, permitted systems, incident reporting and termination of access. Have the responsible privacy or compliance lead assess the arrangement.
Before you commit
Document what the assistant can access and which actions require approval. Keep patient data out of hiring tests and ordinary contact forms. Treat this checklist as procurement preparation rather than a legal determination about a particular vendor.