The procurement pack · self-serve

Buy the platform without a meeting

This page exists so your procurement, security and legal reviewers can finish in one pass. The price is on the label, the agreements are short and standard, and the architecture brief answers the security questionnaire before it is sent. If anything here needs a signature or a customer-specific edit, email hello@healthcareaiops.com and it comes back within one business day.

Pricing and how to pay

$15,000 per institution per year ($1,250/month equivalent), 25 seats included. Annual subscription, renews unless cancelled, no implementation fee.
Card: self-serve checkout completes in minutes; many customers place this on a departmental purchasing card as an operational expense.
Invoice / ACH / purchase order: email hello@healthcareaiops.com with your billing entity and PO number if required; a Stripe invoice with ACH details follows within one business day.

What reviewers usually need

Short-form MSA — two pages, below, with no unusual indemnification. Your paper is also acceptable: send it.
No-PHI attestation / conditional BAA — below. The platform is designed so that no protected health information is submitted; if your counsel still requires a BAA, we sign one.
Security architecture brief — below in summary. The long-form answers to standard security questionnaires (CAIQ-style) are supplied on request within one business day.
Vendor setup — W-9, certificate of insurance, ACH remittance details, and supplier-portal registration are supplied on request to hello@healthcareaiops.com.

Security architecture, in one honest page

No PHI by design. The platform stores governance metadata: inventories, policies, monitoring statistics, attestations, digests. No patient-level data is required by any workflow.
Edge-isolated, single-purpose infrastructure. Runs on Cloudflare's edge (Workers + D1 + R2); no general-purpose servers to patch, no SSH surface, TLS everywhere.
Tamper-evident by construction. Governance records chain by cryptographic hash; chain heads publish daily to a public anchor record captured by an independent web archive, so history cannot be silently rewritten, including by us. (US patent pending on the receipt mechanism.)
Access: passwordless magic-link authentication, seat-based, org-scoped; audit log on administrative actions.
What we do not have yet, stated plainly: a SOC 2 report. Ask us and we will show you exactly what we do instead, and our roadmap for formal attestation as the customer base grows. We will not imply certifications we do not hold.

Master Services Agreement (short form)

Copy it whole or send your own paper. Template for adaptation by the parties and their counsel; not legal advice.

MASTER SERVICES AGREEMENT (SHORT FORM) — TEMPLATE v1.0

This Agreement is between PRIMARYCAREPLAYBOOK LLC, dba The Healthcare AI
Institute ("Provider"), and the customer organization identified on the
order form or invoice ("Customer").

1. SERVICES. Provider grants Customer a non-exclusive, non-transferable
   subscription to the HAI-OS governance platform for the term purchased,
   for Customer's internal business use, for up to the number of seats on
   the order form.

2. FEES. Fees are stated on the order form or invoice, payable annually in
   advance by card or ACH. Fees are exclusive of applicable taxes. The
   subscription renews annually unless either party gives notice of
   non-renewal before the renewal date.

3. CUSTOMER DATA. Customer retains all rights in data it submits. Provider
   uses Customer data solely to provide the service. The service is
   designed to operate without protected health information; Customer
   agrees not to submit PHI (see the No-PHI Architecture Brief).

4. CONFIDENTIALITY. Each party protects the other's non-public information
   with reasonable care and uses it only to perform this Agreement.

5. SECURITY. Provider maintains the security measures described in the
   Security Architecture Brief, as updated from time to time.

6. WARRANTY DISCLAIMER. The service is provided "as is". Provider does not
   warrant that use of the service will result in certification,
   accreditation, or survey outcomes.

7. LIABILITY CAP. Each party's total liability under this Agreement is
   limited to the fees paid in the twelve months before the claim. Neither
   party is liable for indirect or consequential damages. Nothing limits
   liability for willful misconduct.

8. TERM AND TERMINATION. Either party may terminate for uncured material
   breach on thirty days' notice. On termination, Customer may export its
   data for sixty days.

9. GENERAL. Governing law: State of Hawaii, excluding conflicts rules.
   Neither party may use the other's name in publicity without consent.
   This Agreement plus the order form is the entire agreement.

Template provided for adaptation by the parties and their counsel. It is
not legal advice.

No-PHI attestation and conditional BAA

NO-PHI SERVICE ATTESTATION AND CONDITIONAL BAA — TEMPLATE v1.0

1. SERVICE DESIGN. The HAI-OS platform is architected to operate without
   protected health information. It stores governance metadata: model
   inventories, policy versions, monitoring statistics, attestations,
   approval records, and cryptographic digests. Patient-level data is
   neither required nor requested by any platform workflow.

2. CUSTOMER OBLIGATION. Customer agrees to configure inputs so that no PHI
   is submitted to the platform. Free-text fields should contain
   operational descriptions, not patient information.

3. CONDITIONAL BAA. If Customer determines that its intended use requires
   a Business Associate Agreement notwithstanding the no-PHI design,
   Provider will execute the Customer's standard BAA or provide its own
   within five business days of request to hello@healthcareaiops.com.

4. INCIDENT COOPERATION. If PHI is submitted in error, Provider will
   cooperate in prompt deletion and provide written confirmation.

Template provided for adaptation by the parties and their counsel. It is
not legal advice.

Want to see it running first?

The live demo is public: no signup, no sales call. For a walkthrough against your own AI inventory, use the five-minute briefing request and a recorded, institution-specific walkthrough comes back within two business days, watchable on your schedule.