Pricing
No retainer and no hourly billing. You can decide in one conversation.
Several locations or an unusual setup? I quote any scope change in writing at the fit check. The price never changes after work starts.
Options
AI tools, vendors, data flows, and evidence, reviewed in one week.
AI tool inventory with a decision for each tool
Map of patient data outside the EHR
Vendor and BAA review with gap emails ready to send
Access, MFA, and outside exposure checks
Downtime tabletop and a first-hour plan
Readout call, 30/60/90 plan, and MSP handoff
Keeps the record current as vendors and staff change.
Quarterly review of risks and evidence
New AI features checked before they go live
A yearly downtime tabletop
Help with insurance questionnaires
One contact for "is this email legit?"
For when the gap is habits at the front desk.
AI use policy written for your actual tools
Phishing and wire-fraud playbooks
Ten-minute huddle scripts
Onboarding material you own
Ground rules
No charts, notes, uploads, or passwords. Any task that would need patient data is out of scope.
I only read what the public internet already shows about your domain and email. Nothing gets scanned or probed.
You get findings you can read in ten minutes. Your MSP gets the technical asks in priority order.
HTML and PDF, not a login. If Velari disappeared tomorrow, your evidence would still work.
Next step
You'll get a plain answer on whether the sprint fits, even if it's no.
