A compliance product for the people doing the work.

Roughly 46% of U.S. healthcare organizations are deploying generative AI, every state has introduced AI legislation, and twelve have enacted laws. The people accountable for getting this right — security analysts, EHR analysts, clinical informatics specialists, IT compliance officers, ML engineers on clinical data — sit through training that was designed for someone else.

Practice & Protocol is twelve hand-authored scenarios covering the decisions you actually face: vendor BAAs silent on training data, ambient scribe deployments under TRAIGA, AI Impact Assessments that hold up to OCR scrutiny, hallucinated medication orders caught at the sign workflow.

Between annual cycles, Pulse — our copilot — answers the day-to-day questions, grounded in current HIPAA, the January 2025 NPRM, and state law as enacted.