Senior judgment, at a price you know before the first call.

Health systems, medical groups, MSOs, health plans · 6-8 weeks, remote

An inventory of every AI tool in use and the data it touches. A risk-tiering rule set. A governance charter and committee design that fits your existing compliance structure. Human-control checkpoints for each use case, drawn from a workflow-mapping method that has run governed agents in production. A vendor intake standard, the disclosure and consent positions you will take with patients, and a twelve-month operating calendar. Written for the board and the auditor at the same time.

Any organization with an AI contract on the desk; investors reviewing a portfolio company · 2-3 weeks per vendor

An evaluation protocol you can rerun: test cases, acceptance thresholds, failure modes, language and population coverage. A workflow-fit finding that shows where the tool changes who decides what. A contract and data-rights review covering training-data use, de-identification claims, subprocessors, breach terms, and model-change notice. A written go, go with conditions, or no. Second and third vendors in a batch are $6,500 each.

Organizations under roughly 1,500 staff that must name a privacy official and need someone accountable for AI · Monthly, twelve-month minimum

The designated privacy officer role, held by our privacy and compliance lead, a former Fortune 6 global privacy director. The AI governance committee, chaired and run for you. Quarterly inventory refresh, incident and complaint handling on call, policy maintenance, and a monthly evidence packet in the same format as our operations reports. Two days a month at $6,500; three to four at $9,500.

CEOs and COOs of 50-500 person provider organizations, MSOs, and health plan operations · 3-4 weeks, remote

Your operations mapped end to end in nine layers: phases, steps, human actors, agent actors, systems, controls, governance checkpoints, communications, and gaps. The manual load quantified. Three to five agent-ready workflows scored on feasibility and payoff, each with a build, buy, or wait verdict. A costed modernization roadmap and a board readout. No patient data is needed; this is process work.

Organizations holding a Modernization Review roadmap · 60-90 days

One production agentic workflow, or several, built and run with the human controls from your review as the acceptance criteria. Quoted only from a review roadmap, never sold cold. Priced by workflow count and complexity.

Medicare Advantage plans, delegated medical groups, health systems with an enrollment function · 4-6 weeks

The member journey mapped from enrollment through renewal, every handoff and system named. Churn at redetermination and reconciliation losses quantified from your own eligibility and payment files. The five failure points ranked by dollars, with a remediation plan and owners. Runs under a Business Associate Agreement on your tenant or our isolated environment.

Health systems and vendors with a large deployment that has stalled · 4 weeks

An independent read of where the program actually is versus the status reports. The three decisions needed to move the program forward, with options and costs. A reset plan with a ninety-day cadence. A steering seat for the reset quarter is quoted separately. This is the work of someone who has run a hundred-person delivery organization inside a national health system.

Seed to Series B health-tech companies; VC and incubator portfolios · 6-8 weeks

A data inventory and flow map. A regulatory applicability decision: HIPAA covered entity, business associate, or neither; CCPA, GDPR, the FTC Health Breach Notification Rule, state consumer health data laws. The policy set and notices, the vendor and subprocessor program, a privacy-by-design review of the product itself, and the diligence binder an acquirer expects. Portfolio program: $14,500 per company at five or more, with a shared playbook.

PE roll-ups of clinics and MSOs, health systems acquiring practices, digital-health acquirers; owners preparing to sell · Inside the deal timeline

Buy side: a diligence report on IT, security, privacy, and AI assets, including model provenance, training-data rights, and the consent basis for the data the models were built on. Sell side: an $18,500 readiness assessment to identify gaps before buyer review, with remediation quoted from the findings.

Independent practices, 1-3 providers · 1 week, fully remote

Security posture, backup reality check (does a restore actually work?), a HIPAA quick-gap review, and the five riskiest findings ranked. You get a written findings memo and a one-hour readout with a prioritized fix list that your current IT person, or we, can execute.

Clinic groups, MSOs, and community health centers · 2-3 weeks, fully remote

A full security review with restore verification, a HIPAA gap assessment and policy inventory, a systems and architecture map, and a vendor spend review. The deliverable is board-ready: findings, an 18-month costed roadmap, a 90-day remediation plan, and a funding map showing which grant programs can pay for the work. Priced below the federal micro-purchase threshold, so most health-center boards can approve it without a competitive procurement.

Medicare Advantage primary-care groups and MSOs · Typically 3 weeks from data receipt

Your RAF trend across the V24→V28 transition, quantified from your own payment files: where the decline concentrates, a coding-accuracy review that surfaces gaps and over-coding alike, and the documentation findings behind the numbers. A quantified answer to “where did our revenue go,” with a compliant remediation plan. The fee credits toward any ongoing engagement.