The short answer
Ask for six things in writing before any patient data moves: a signed Business Associate Agreement, accounts you control and can revoke, accuracy measured on your own documents against a staff-keyed sample, exception handling with reason codes, a named owner of mistakes, and a written plan for failure.
Use the same list with every vendor, including us. If an answer is vague, treat it as a no.
Data handling: agreement and accounts
Any build that touches PHI starts only after a signed Business Associate Agreement and runs through accounts you control and can revoke. Ask who holds the credentials, whether they are yours, and how fast you can pull them back.
The teardown needs no patient data at all: the sample set is de-identified or synthetic documents, so you can run the first step without moving anything sensitive.
Ask where documents live, who can see them, and what happens to copies when the work ends.
Accuracy: measured, not asserted
Before go-live the Keying Build keys a held-back sample your staff already keyed, and every mismatch is listed. Ask to see that list on your own documents, not on a demo set.
After go-live, the Monthly Accuracy Report counts fields keyed, fields your staff corrected, and exceptions by reason, every month. When a field your staff mark wrong turns out to be a rule problem, the rule is fixed and the affected records are re-checked before the next batch.
Exceptions and ownership
Every exception carries a reason code and the source page, and nothing is guessed. Ask to see the reason codes before you sign, and ask who decides each one.
Ask who owns mistakes in writing. Our named owner is Mike Rodgers, and the exception log stays yours: your people decide every exception, clinicians decide anything clinical, your team submits to payers.
Ask what happens on a bad day: does the batch stop, does the item reach a named person with the page attached, and can you revoke access the same day?
Scope, price and pressure
A fixed price for a defined scope beats an hourly estimate with a wide boundary. For reference, a general single-function workflow automation audit sells for $2,000 fixed over 1 to 2 weeks, build not included (Riverborn, read 2026-09-26).
Watch for promises. We do not promise savings or staff reductions, we make no clinical or coding decisions, and we do not submit, call or appeal on your behalf.
Start small. A teardown on one workflow needs no patient data and ends with a written map, a rulebook and a fixed build quote.