The rules
- No PHI in prompts
- BAA in place with every AI vendor
- Encryption at rest and in transit
- Access logs on every retrieval
Where AI still helps
Pre-sales education, meeting booking, general product answers, follow-up drafting from de-identified notes.
Where humans own end-to-end
Any conversation touching a patient, clinical data, or reimbursement specifics.