Twenty-five years inside the programs, not adjacent to them.

Muster is led by Robert Colon-Torres, who has spent his career building compliance and risk programs in safety-net healthcare.

He started as an EMT in Oakland, which is a useful place to begin a career in this field. It teaches you early that documentation is not paperwork — it's the record of what happened to a person, and someone will read it later under circumstances nobody wanted.

From there: senior compliance and risk leadership at community health organizations across California and New York, including federally qualified health centers, HIV service programs, and organizations serving adults with developmental disabilities. Programs operating under HRSA Section 330, Ryan White, ADAP, 340B, and FTCA deeming — usually several at once.

He currently serves as chief compliance officer at a California community health center, overseeing compliance and risk. Which means the work here is informed by a program running today, under current rules, with real reviewers on the calendar — not by a consulting practice that left operations a decade ago.

Why this firm exists

Because the same conversation kept happening. An organization would buy a compliance training library, assign it, and still be unable to answer the only question that matters during a site visit: which rule requires this, and who does it apply to?

The libraries aren't bad. They're generic, and generic is exactly the wrong shape for organizations carrying four funding streams and three confidentiality regimes at once. The map has to come first. That's the whole thesis.

How we work

Plainly. Findings are written the way a reviewer would write them, not softened for comfort. If your program has a real problem, you'll hear it in the first conversation, because the alternative is hearing it from someone with enforcement authority.

Confidentiality is the trade. Nothing about your organization, your incidents, or your staff leaves an engagement — not as a case study, not as a conference anecdote, not anonymized.