The Program
A managed program, not a software license. Each engagement is a recurring cycle of assessment, monitoring, maintenance, and expert-signed reporting — the standing risk function your organization needs, delivered as a partnership rather than a hire.
Clinical Risk Monitor in one paragraph. It is a recurring partner engagement from Austin-Zierke Clinical Risk Partners for pregnancy help organizations and healthcare nonprofits: security risk assessment, ongoing vulnerability and compliance monitoring, HIPAA-aligned policy and claims-language work, AI governance, accreditation readiness support, and board-ready reporting. Every formal cycle ends with a cover letter signed by a named compliance expert. Foundation pricing starts at about $249 per month by organization revenue; full tables are published below. The list price is the nonprofit price.
Each reporting cycle ends with a plain-language cover letter reviewed, edited, and signed by a named compliance expert — name, title, firm, and date, with the scope and limitations of the review stated explicitly. The letter summarizes your posture, the findings that matter, and who owns what next. It is written to be handed directly to your board, your insurer, or your surveyor.
This is the line we do not cross in either direction: our AI accelerates analysis but never signs, and no report leaves this firm without expert review. Human attestation and expert support — automation never replaces accountability.
Every clinic starts from the same base price, set by organizational revenue, then selects the level of ongoing oversight that matches its risk and staffing. Signed expert attestation is included at every level.
Clinical Risk Monitor is compliance monitoring, risk management, and governance. It is not managed information technology, and it is not continuous cybersecurity protection unless your technology partner separately provides true endpoint detection, network monitoring, remediation, and incident response. We position it accurately because that protects both your expectations and the credibility of the work.
The core program covers compliance monitoring, risk management, HIPAA Security Rule oversight, cybersecurity governance, documentation management, staff education, AAAHC readiness support, and coordination with your existing IT provider.
Base price · $249–$749/mo by annual revenue
The base program. Every engagement includes:
Recommended
Base price + $100/mo
Everything in Foundation, plus monthly technical oversight:
Base price + $250/mo
Everything in Foundation Plus, plus executive-level attention:
| Annual revenue | Foundation | Foundation Plus (Recommended) | Executive |
|---|---|---|---|
| Under $300,000 | $249 | $349 | $499 |
| $300,000 to $599,999 | $329 | $429 | $579 |
| $600,000 to $999,999 | $449 | $549 | $699 |
| $1 million to $1.49 million | $549 | $649 | $799 |
| $1.5 million to $1.99 million | $649 | $749 | $899 |
| $2 million to $2.49 million | $749 | $849 | $999 |
An annual contract, paid as ten monthly payments, gives your organization two months free for committing to a twelve-month term. A month-to-month arrangement is available at the listed monthly rate with a three-month minimum, though it does not include a waived onboarding fee.
Revenue alone does not capture workload — a smaller clinic with a large part-time or volunteer workforce can generate more training, access-control, and documentation work than a larger clinic with a lean staff. Each revenue tier includes a paid workforce allowance.
| Revenue tier | Included paid workforce | Additional users |
|---|---|---|
| Under $300,000 | Up to 8 people | $6 per person per month, $30 monthly minimum |
| Under $600,000 | Up to 10 people | $6 per person per month, $30 monthly minimum |
| Under $1 million | Up to 20 people | $6 per person per month, $30 monthly minimum |
| $1 million to $1.49 million | Up to 25 people | $6 per person per month, $30 monthly minimum |
| Each additional $500,000 | Adds approximately 10 people | $6 per person per month, $30 monthly minimum |
Volunteers with no system or protected health information access are not charged. Regular volunteers with access to email, the EHR, scheduling, or the network count as users.
A second physical location, mobile medical unit, or satellite site adds physical safeguard reviews, device inventories, and additional workforce access questions, and is priced accordingly.
| Additional location type | Monthly add-on |
|---|---|
| Administrative office, no patient services or stored PHI | $50 |
| Limited-service satellite, one or two days weekly | $100 |
| Full-time patient service location or mobile medical unit | $150 |
| Location with a separate IT network, EHR instance, or IT vendor | $200 |
The initial Security Risk Assessment and implementation work is priced separately from the monthly fee. It involves documentation collection, a technology and vendor inventory, a policy gap review, an initial corrective action plan, leadership orientation, and setup of the compliance tracking system.
| Organization size | Onboarding fee |
|---|---|
| Under $300,000 | $500 |
| $300,000 to $599,999 | $750 |
| $600,000 to $999,999 | $1,000 |
| $1 million to $1.99 million | $1,500 |
| $2 million and above | Starting at $2,000 |
Onboarding is due in full for month-to-month arrangements, reduced by half for an annual contract paid monthly, and waived entirely when the full annual amount is prepaid. Where prior accreditation gap-analysis and implementation work has already covered much of the required assessment, onboarding is waived.
The following fall outside the monthly subscription and are billed only when needed.
| Service | Fee |
|---|---|
| Policy customization beyond annual maintenance | $175 per hour |
| Live HIPAA or cybersecurity training | $750 virtual; $1,500 onsite plus travel |
| Additional tabletop exercise | $750 virtual; $1,500 onsite plus travel |
| Cybersecurity insurance application assistance | $500 to $1,000 |
Networks of affiliated organizations qualify for volume pricing rather than a flat individual discount. Each affiliate signs its own agreement and remains responsible for implementing its own corrective actions, while the network benefits from shared templates, standardized reporting, and network-wide discounting. Custom state-specific work may carry additional fees beyond the discounted base rate.
| Participating affiliates | Network discount |
|---|---|
| 5 to 9 organizations | 5% |
| 10 to 24 organizations | 10% |
| 25 to 49 organizations | 12.5% |
| 50 or more organizations | Negotiated, up to 15% |
Every engagement includes our written portability commitment: your organization owns all reports, policies, findings, and evidence we produce, with export in standard formats and orderly offboarding support on request.
This site sets no advertising or analytics cookies. Dismissing this notice stores a single preference in your browser — nothing else. Read the privacy & cookie disclosure.