Use AI with confidence. Keep patient and client data safe.
Prime Tech Associates helps healthcare providers, home care and home health agencies, clinics and small to mid-sized businesses put clear rules and real security around AI, aligned to NIST AI RMF, ISO/IEC 42001 and HIPAA.
Service-disabled veteran-owned · Minority-owned · Led by an AIGP and AAISM credentialed founder
Questions we help you answer
AI security and governance, sized for real organizations.
Your staff are already using AI. We help you find it, set sensible rules, lock down the data and prove it, without slowing your team down.
AI Risk Assessment
A fixed-price review of how AI is used across your organization, with a prioritized, plain-language action plan. $5,000.
Learn more →Home Care AI Governance Starter
AI inventory, use policy, vendor and BAA checklist, staff training and a HIPAA Security Risk Analysis, bundled. $3,500–$7,500.
Learn more →AI Policy & Governance Program
An acceptable-use policy, named owners, an approval process and a review cycle your team can actually run.
Learn more →Shadow AI Discovery
Find the AI tools and browser extensions staff use without approval, and what data is flowing into them.
Learn more →AI / LLM Security Testing
Prompt injection, data leakage and access testing for chatbots, copilots and AI integrations, mapped to the OWASP LLM Top 10.
Learn more →Fractional AI Governance Officer
Ongoing AI oversight on a monthly retainer: vendor reviews, policy updates, quarterly reviews and a person to call. From $2,500/month.
Learn more →Ongoing AI oversight from $2,500/month.
AI tools change every month. A one-time assessment tells you where you stand; a Fractional AI Officer keeps it that way. You get a named, AIGP and AAISM credentialed lead who reviews new tools, keeps your policy current, reports to leadership and picks up the phone when a question comes up.
Three monthly tiers
- Essentials, $2,500/mo. Monthly check-in, new-tool reviews, quarterly governance review.
- Growth, $4,500/mo. More hours, deeper vendor and AI app reviews, training refreshers.
- Executive, $7,500/mo. Board-level reporting, priority on-call and incident support.
3-month minimum. No full-time hire required.
Eight steps. Mapped to NIST AI RMF and ISO/IEC 42001.
A simple structure we use on every engagement, so your AI program makes sense to staff, auditors, insurers and future buyers.
Inventory
List every AI tool in use, who uses it, what data goes in, and what decisions it touches. Include the AI features hiding inside software you already pay for.
Policy & ownership
Write a plain-language AI acceptable-use policy and name an owner for each tool. Someone has to be accountable for saying yes or no.
Data protection
Decide what data may never go into AI tools (patient records, Social Security numbers, financials) and put technical guardrails behind the rule.
Vendor vetting
Check how each AI vendor stores, trains on and shares your data. For healthcare, confirm whether a Business Associate Agreement is offered and signed.
Access & logging
Use company accounts with single sign-on and MFA, not personal logins. Turn on audit logs so you can see who used what.
Testing
Test AI chatbots and integrations for prompt injection, data leakage and wrong answers before customers or patients see them.
Training
Give staff short, practical training: what is allowed, what is not, and how to spot an AI output that should not be trusted.
Quarterly review
Every quarter, re-check the inventory, vendors, incidents and policy. AI tools change monthly; your controls should keep up.
AI controls only work if the basics work.
Strong accounts, protected devices, safe email and tested backups are what make AI rules enforceable. We continue to provide managed IT and cybersecurity for Las Vegas and Henderson businesses.
Also from Prime Tech
- M&A cyber and AI due diligence. Find technology, security and AI risk in a target before you sign. Details →
- Federal and SDVOSB teaming. Cybersecurity and AI governance support for primes and agencies. Details →
- Managed IT and cybersecurity. Flat-rate support, MFA, endpoint protection, email security and backups.
AI is already in your business. The goal is not to stop it. The goal is to know where it is, decide the rules, and protect the people whose data you hold.
Frequently asked questions
What is AI governance, in plain terms?
It is the set of rules, owners and checks that decide which AI tools your business uses, what data can go into them, and how you know they are working safely. For most small organizations it fits in a short policy, an inventory and a quarterly review.
We are a small agency. Do we really need this?
If any staff member uses ChatGPT, Copilot, an AI note-taker or an AI feature inside your EHR or scheduling software, you already have AI risk. The question is whether anyone is managing it. A small agency usually needs a lightweight program, not a large one.
Does HIPAA apply to AI tools?
Yes. If protected health information is entered into an AI tool, that vendor is handling PHI and HIPAA rules apply, including the need for a Business Associate Agreement and a risk analysis that covers the tool.
Which frameworks do you use?
We align our work to the NIST AI Risk Management Framework, ISO/IEC 42001, the HIPAA Security Rule and the OWASP Top 10 for LLM Applications, translated into practical steps your team can follow.
Do you still provide managed IT and cybersecurity?
Yes. Managed IT and cybersecurity are the foundation. AI controls depend on good accounts, devices, email security and backups, so many clients use both.
Where do you work?
We are based in Henderson and serve Las Vegas, Henderson and the rest of Nevada in person, and clients nationwide remotely.
Not sure where AI is already being used in your business?
Start with a 30-minute call. We will ask a few plain questions, tell you what we would look at first, and give you a fixed price if an assessment makes sense.