Training is one deliverable. Most engagements start with something more urgent — a site visit on the calendar, a finding that needs remediation, or a program that grew faster than its documentation.
A structured walk-through of your compliance and risk program against what a reviewer will actually ask to see. Not a checklist emailed to you — a working review of documents, committee minutes, training records, policies, and the gaps between what your policies say and what your organization does.
Typically two to four weeks depending on size.
Your organization's full training-to-regulation map, covering every funding stream, licensure condition, and state law that applies to you. Delivered in a format you own and can maintain.
Typically three to six weeks.
The crosswalk tells you what has to be taught. This is the work of actually teaching it — courses written for your programs and your population, delivered into the system you already use, with reporting that closes the loop.
Scoped to the engagement. A packaged course library is in development — ask about early access.
Compliance and risk policy suites, committee charters, incident and grievance workflows, and the documentation trail that demonstrates the program is running rather than merely written.
Scoped to the engagement.
Standing support for organizations without a full-time compliance officer, or with one who needs a second set of eyes on the hard calls. Retainer-based, with a defined scope and a named point of contact.
Monthly retainer, minimum term by agreement.
Every covered entity has to designate a privacy official. Every compliance program needs someone accountable for it by name. Not every organization needs that person on payroll at full time — and for many, a full-time hire with salary, benefits, and recruitment costs is out of proportion to the size of the program it would run.
Here we hold the role rather than advise the person holding it: named in your policies, reporting to your governing body on your calendar, and accountable for the program itself.
Retainer with a defined minimum term. Executed business associate agreement, written designation, and defined escalation authority before the role takes effect.
Every engagement starts with a scoping call and a written scope before any invoice. You'll know what's included, what isn't, what it costs, and roughly how long it takes before you commit to anything.
Work is done by the person you spoke to. There is no bench of junior staff to hand your program off to, which is a limitation as much as a feature — it means capacity is finite and timelines are real.
We don't provide legal advice or legal representation, and we're not a substitute for your counsel. Where a question is genuinely legal — contract terms, litigation exposure, statutory interpretation with money on it — the right answer is your attorney, and we'll say so.
Training courses are educational. They don't carry continuing education credit unless the course says so, and they don't replace your own determination of what your organization is required to do.
We also don't take engagements that would put us on both sides of a matter. If there's a conflict, you'll hear about it before you hear a price.
Not sure which one you need?
Most organizations that call about training turn out to need the readiness review first. It's usually cheaper to find out what's actually wrong than to buy a fix for the wrong problem.
Twenty minutes to work out what you actually need, before anyone talks about scope or price.
Book a 20-minute call