Quick answer
An AI readiness audit is a three week review of your data, systems, staffing and governance that ends with a ranked list of what an AI agent could safely do in your organisation now, what it could not, and what would have to change first. It is deliberately capable of concluding that you should not buy anything yet.
What is an AI readiness audit?
A structured review that answers one question: what could an AI agent safely do here, starting now, given the data you actually have, the systems you actually run and the people who actually have to use it.
It is not a technology assessment and it is not a vendor bake off. Most of what determines whether an agent deployment succeeds is organisational: whether someone owns it, whether the workflow it touches is documented, whether the data it needs is where people think it is. Those are the things the audit examines, because they are the things that fail.
The output is a ranked list with reasoning, a compliance gap list, and a recommended first project. If the honest recommendation is to wait, that is what the report says. We would rather write that than sell an implementation that will not work.
What happens during the three weeks?
Week one is discovery. Interviews with clinicians, front desk staff, billing and whoever administers the EHR, plus a look at the systems themselves. We ask where the day goes and where work piles up, which is not always where leadership expects.
Week two is analysis. We map the candidate workflows against feasibility, benefit and risk, and check the compliance position against the HIPAA Security Rule and the NIST AI Risk Management Framework. We also establish what integration would actually require in your estate, which for larger sites means a real conversation about your EHR integration queue.
Week three is the report and the conversation about it. The report goes to whoever has to approve the spend, and we present it rather than emailing it, because the questions in the room are the useful part.
What do you actually get at the end?
A document you can act on and a decision you can defend. The deliverables are listed above, but the two that matter most are the ranked shortlist and the stopping rule.
The ranked shortlist tells you which workflow to attack first and why, in terms of your organisation rather than the market's. For many practices that is documentation, because the benefit is felt by the people doing the work. For others it is the phone, or the denial queue, and the reasoning is written down so you can disagree with it.
The stopping rule tells you in advance what result would make you expand and what result would make you stop. Written before the pilot, it is the single cheapest piece of governance available.
Who is this for, and who is it not for?
It is for organisations that have decided to do something and want to be right about what. It is particularly useful where an evaluation has stalled, because a stalled evaluation is usually a sign that the wrong question is being asked.
It is not for organisations that have already chosen a vendor and want validation. We will give you an honest answer, which in that situation is often unwelcome and always expensive to ignore. It is also not for a solo clinician wanting to try an ambient scribe, where the sensible advice is to read the comparison page, pick one with published pricing, and try it. We would rather say that than take the fee.
How is this different from a vendor's assessment?
A vendor assessment is a sales qualification exercise, and a good one is genuinely useful. It is still asking whether you are a fit for their product, not whether their product is the right thing for you to buy.
We take no commissions, no referral fees and no paid placements, and we do not resell anything. That is not a claim to virtue, it is a description of the business model, and it is the only reason our answer can be that you should not buy anything this year. Where we do recommend a shortlist, the reasoning behind it is on the comparison pages where you can check it.
What happens after the audit?
Nothing automatically. There is no implementation obligation, and a report that recommends waiting is a complete piece of work rather than a failed sale.
If you do proceed, the natural next step is a sequenced plan that takes the first use case to production with controls and rollback defined up front, which is a separate engagement. Some organisations run that themselves from the report, which is a good outcome and we will say so.
Before any of it, if you want to sanity check the numbers yourself, the ROI calculator models the documentation case with its assumptions printed on the page.
What you are left holding
The engagement is finished when these are true, not when the calendar says so.
- A decision you can defend, with the reasoning written down
- A first project scoped small enough to finish and measurable enough to judge
- A compliance position you can show an auditor rather than describe
- A clear answer, sometimes, that the right move this quarter is to fix something else first
Questions we get asked
How much does an AI readiness audit cost?
It is a fixed fee agreed before the work starts, scaled to the size of the organisation rather than billed hourly. We quote after a short call, because a five clinician practice and a four hospital system need different amounts of work and should not pay the same. There is no charge for the call.
Do you need access to patient data?
No. The audit works from workflow descriptions, system configuration, volumes and aggregate reporting. Where any engagement would touch protected health information, we sign a business associate agreement first and work within it, but readiness assessment does not require it.
Can you do this if we have already started a pilot?
Yes, and this is one of the more useful moments to do it. A pilot with mixed results usually contains the answer to why, and the question is normally whether the problem was the tool, the workflow or the absence of an owner. Those need different responses.
Will you recommend a specific vendor?
We will recommend a shortlist and explain the reasoning, including where our knowledge stops. We will not tell you there is one right answer where there is not, and we have no commercial interest in which of them you choose.
What if the answer is that we are not ready?
Then the report says so, and says specifically what would have to change and in what order. That is a useful outcome, and considerably cheaper than the alternative, which is discovering it eight months into a contract.
Make it a formal evaluation
Everything we publish is free to read and free to argue with. When the decision has to be signed, dated and defended to a board, we run the evaluation against your own estate. We take no vendor commissions.
- A 30 minute evaluation call with an analyst, no pitch deck.
- A read on the vendors and the rules in play, and the use cases we would not touch yet.
- A written proposal with scope, sequence and a fixed fee.
- No obligation
- Direct with an analyst, not a sales rep
- BAA available before any PHI discussion