Healthcare IT for the
administrative and
compliance layer.

Hospital systems, community health centers, and physician groups. We don't touch clinical systems or PHI workflows; we handle the IT scaffolding that lets the clinical-facing teams do their work. Network, infrastructure, compliance documentation, and procurement.

Request capability match →Capability statement

§ 01

What we do · what we don't

A clear boundary between clinical workflow vendors and administrative IT keeps the BAA scope honest. We stay on our side of the line.

§ In scope

Network and infrastructure modernization for administrative environments
Cybersecurity advisory aligned to the HIPAA Security Rule
Hardware procurement through TD SYNNEX and Dell channels
Managed IT services for non-clinical operations
Vendor risk management documentation aligned to HHS guidance

§ Out of scope

EHR implementation, configuration, or clinical workflow design
PHI processing or any system that touches the clinical record
Clinical-facing application development
HIPAA compliance auditing or attestation (we are not an audit firm)

§ 02

Why a hospital CIO picks us

§ NIST

800-171 adapted to HIPAA

NIST 800-171 self-assessment support adapted to HIPAA risk analysis. SSP and POA&M scaffolding deliverable per engagement.

§ MBE

NYC + NMSDC

NYC MBE certified through 2027-05-31. NMSDC-certified MBE through 2027-06-30. Eligible for hospital-system supplier-diversity sourcing.

§ Vendor risk

Documented VRM

Vendor risk management documentation aligned to HHS guidance. Standardized BAA template available on engagement.

§ Procurement

TD SYNNEX + Dell

Channel-tier pricing on enterprise hardware. TAA-compliant fulfillment. Country-of-origin documentation line-item on quote.

§ 03

Reference engagements

Healthcare references are covered under mutual NDA. Available for review on engagement scope.

§ Ref · 01Hospital system

Reference under mutual NDA

Healthcare engagement references covered under mutual NDA. Sanitized scope summary available on engagement scope after NDA exchange.

Type: Available under mutual NDA
NDA turnaround: One business day to draft
Detail: Provided on engagement scope

§ Ref · 02Verified PPQ

Public-sector hardware delivery

Public-sector references illustrate channel turnaround and documentation discipline: Rensselaer County NY and City Utilities of Springfield MO, both 2022, both delivered.

Detail: See /industries/sled
NAICS: 423430
Lead time: 7 days · Springfield delivery

§ 04

Healthcare FAQ

Are you HITRUST certified?

No. HITRUST certification not held. We do not represent ourselves as a HITRUST-certified service provider and do not bid scopes that require HITRUST attestation.

Do you sign BAAs?

Yes, on engagement scope. Our standard BAA template is available on request and covers administrative IT services. PHI access is excluded by default.

HIPAA Security Rule controls?

We support clients in their HIPAA risk-analysis and safeguard implementation; we are not an audit firm. Control mapping aligns to NIST 800-171 as a structural baseline, with HIPAA-specific adaptations per engagement.

§ Tooling

Built with our own GovCon SaaS

Three live products, plus DeliverOps (Q4 2026). Same engineers who deliver the consulting practice ship the tooling that documents it. Free to evaluate.

§ Capture