Is the free audit really free? What's the catch?
Genuinely free. No credit card. No "first month's fee waived" trickery. We do it because the audit itself is the sales process — if our shortlist makes the ROI obvious, you'll engage us. If not, you keep the diagram and the ranked list and move on. We absorb roughly 6–8 hours per audit; we'd rather invest that in qualified consultants than burn it on cold outreach.
Are you a HIPAA Business Associate?
For paid engagements involving PHI handling, yes — we execute a BAA before any production data touches our systems. For the free audit phase, we work only with anonymized workflow descriptions and screenshots with PHI redacted. We will tell you exactly what to redact before you share anything.
What if my physician-group clients use different EHRs?
That's the typical case. Our architecture is EHR-agnostic — we've built flows that integrate with Athena, Epic (via FHIR), eClinicalWorks, Kareo, NextGen, and AdvancedMD. Each EHR gets its own connector module; the rest of the pipeline (de-identification, AI orchestration, dashboard) stays identical across tenants. White-label per consulting client.
Can we white-label this to our physician-group clients?
Yes — that's the primary deployment model for consulting firms. Your clients see your consulting brand on the dashboard, SOPs, and training materials. We stay invisible. You bill them retainer. We bill you wholesale on a tier that scales with the number of physician groups under management.
How do you handle PHI in AI prompts?
Two-layer approach. (1) De-identification: 18 HIPAA identifiers stripped before any external API call. The AI sees abstracted tokens like <PT_ID_4291> instead of names, MRNs, addresses, dates. (2) BAA-covered endpoint: for prompts that must include partial PHI (e.g., clinical context), we route only to BAA-covered model endpoints — Azure OpenAI, AWS Bedrock, or on-prem Llama. Public Claude/GPT endpoints are off-limits for anything PHI-adjacent.
What's the smallest engagement you take?
The free audit. From there, we scope based on what the audit reveals — sometimes a single automation makes sense first, sometimes a full pilot. We do not have a minimum retainer for the first engagement; we'd rather start with one flow done well than overpromise on scope.
Who owns the code and the dashboards after the build?
You do. Every flow, dashboard, SOP, and training video is delivered to your repos and infrastructure. We retain no ongoing access unless you contract us for support. Lock-in is not how we keep clients.
