HIPAA-minded AI governance for home care agencies and clinics.
Caregivers, schedulers and office staff are already trying AI to save time. We help you allow the useful parts, stop patient information from leaking, and document it the way HIPAA expects.
Where AI goes wrong in small healthcare organizations.
- Staff paste visit notes, diagnoses or client names into free AI chatbots to “clean up” writing.
- AI note-takers join calls and store recordings with a vendor that has no BAA.
- Scheduling, EHR or billing software quietly adds AI features that change how data is shared.
- Personal accounts are used, so the agency cannot see, control or delete what was shared.
- No written policy exists, so staff are guessing and no one can show an auditor otherwise.
Home Care AI Governance Starter
- AI inventory of tools and AI features in use across office and field staff
- AI acceptable-use policy written for caregivers and office staff, one to three pages
- AI vendor and BAA checklist, applied to your current tools
- Staff training session (live or recorded) with attendance sign-off
- HIPAA Security Risk Analysis with AI tools in scope, plus a risk management plan
- Readout meeting and a 90-day action plan
Built for small healthcare teams.
Practical for organizations without a compliance department, and still aligned to recognized frameworks.
Home care & home health agencies
Field staff on phones, office staff on scheduling and billing systems, and a lot of PHI moving between them.
Clinics & small practices
Medical, dental, therapy and behavioral health practices considering AI scribes, chatbots and AI in their EHR.
Healthcare-adjacent businesses
Billing companies, staffing agencies and service providers who are business associates and handle PHI.
Frequently asked questions
Can our caregivers use ChatGPT to write visit notes?
Not with patient information in a consumer account. Free and standard consumer AI tools generally do not offer a Business Associate Agreement. If you want AI for documentation, use a tool that signs a BAA, is configured correctly, and is covered by your policy.
What is a Business Associate Agreement and why does it matter for AI?
A BAA is a HIPAA-required contract with any vendor that handles protected health information for you. If an AI vendor processes PHI without a BAA, that is a compliance gap, even if nothing goes wrong.
Is the HIPAA Security Risk Analysis really required?
Yes. HIPAA requires covered entities and business associates to conduct an accurate and thorough risk analysis. The Starter package includes one, with AI tools in scope.
What does the Starter cost?
$3,500 to $7,500, fixed, depending on staff count, number of locations and how many systems are in use. You get a written quote after a short call.
We already have an IT company. Does that matter?
No. We work alongside your current IT provider. Many agencies keep their IT support and use us for AI governance and the risk analysis.
Want to know what your staff are doing with AI today?
A 30-minute call is enough to tell you whether the Starter fits and what it would cost for your agency.