Resources

A questionnaire you can send to any vendor.

Including us. Adjectives are not answers. If a reply claims a HIPAA certification — none exists — treat that as a finding.

  1. Ask this

    Which EMRs are live in production today, named, with a practice that will confirm it? Do not accept a roadmap list.

  2. Ask this

    Do you run the practice website, or only the phone line?

  3. Ask this

    What factors are required before any chart read? What happens on a surname alone?

  4. Ask this

    How are third-party, pharmacy, and other-office callers refused? Is that a tool-boundary rule or a prompt?

  5. Ask this

    Does anything patient-facing publish without a named human release bound to a content digest?

  6. Ask this

    Is escalating a low-confidence call your approval mechanism? If yes, that is exception routing, not a gate.

  7. Ask this

    Can the practice recompute the audit chain, or only download transcripts?

  8. Ask this

    Where does PHI reside, in which country, and is it used for model training?

  9. Ask this

    Will you sign a BAA? Who is the covered entity and who is the business associate?

  10. Ask this

    How does the assistant identify itself as automated on the first utterance of a call and of a chat?

  11. Ask this

    What is the crisis path, and is it opened before the reply is shown?

  12. Ask this

    In test mode, which charts are writable? How do you prove a stranger cannot reach a real chart?