- General written descriptions of a process
- Role titles and non-identifying responsibility lists
- Blank templates and blank checklists
- Generic examples created for the working session
- Aggregate, non-identifiable timing or volume information
Current service boundary
Scope first. No PHI by design.
Vera Point’s current Workflow Clarity Review is an administrative advisory engagement. It is designed to be completed without Vera Point creating, receiving, maintaining, or transmitting protected health information on a client’s behalf.
Current operating positionNo PHI accepted. No system access. No record-handling services.
Information boundary
What may—and may not—be shared.
- Patient, member, employee, or client names
- Medical records, diagnoses, or treatment details
- Dates of birth, record numbers, or account numbers
- Case files, raw logs, emails, or populated forms
- System screenshots, credentials, exports, or EHR access
Business Associate position
A BAA is not part of this package.
HHS describes a Business Associate, in general, as a person or entity performing certain services or functions for a covered entity that involve the use or disclosure of PHI. Vera Point’s current offer is intentionally scoped so those activities are not required.
Vera Point is not offering PHI-handling or Business Associate services through the Workflow Clarity Review and does not enter a Business Associate Agreement for this package. A BAA would not, by itself, make an out-of-scope project acceptable.
If a proposed engagement may require PHI access, the inquiry stops before information is shared. Any future service involving PHI would require a separately defined offering plus appropriate legal, privacy, security, insurance, technology, and contracting review before it could be considered.
Engagement guardrails
Fit check
The prospective client describes the bottleneck in general terms with no records or identifiers.
Written scope
The workflow, deliverables, accepted inputs, exclusions, timing, and fee are confirmed before payment.
Boundary reminder
The no-PHI rule is repeated before the working session and in meeting materials.
Stop on scope drift
If sensitive information appears necessary, it is not shared and the engagement pauses or ends.
This website
What the site itself collects.
The fit-check form prepares a message in the visitor’s email app. The message is not submitted to or stored by this website. It is received only if the visitor reviews and sends it from their email account.
The footer’s aggregate visit tally uses a browser session marker to avoid counting every page view as a new visit and stores the numeric tally in the site’s database. It is not intended to create individual visitor profiles.
Official reference points
Read the HHS guidance.
Still a fit?