Healthcare AI vendor risk · A ReMyll product
Sample assessment Contact
AITPRM Health™A ReMyll product
FAQ

Questions buyers ask before a demo.

Short answers on the method, running a review, and how the service handles data. Anything not covered here can go through the contact form.

The RecordCase studies2026 AI Renewal GuideFAQSample assessmentTrust Center
About the method
01

Is AITPRM Health a questionnaire?

No. A questionnaire records what a vendor says. AITPRM Health scopes the questions to the deployment, rates evidence separately from answers, converts gaps into tiered findings, and produces a scored record and sample contract controls. The questionnaire is one input. See where this is shown →

02

Can we use the questionnaire we already have?

Yes. Import your existing questions or add them to any domain. They sit alongside the library, are scored under the same rubric, and carry a Custom source tag in the ledger and every export, so a reviewer can always tell which questions were yours and which came from the library. See where this is shown →

03

Does a high score mean the vendor is compliant?

No. Scores and findings are decision support. They inform your organization’s judgment and are not a determination or certification of compliance with any law or standard. See where this is shown →

04

Who writes the questions?

AITPRM maintains the library. Every question records the source it is written against and the evidence it expects. You choose the questions to ask: scoping selects the set that applies to the deployment, and your team can include or exclude questions above the risk floor. See where this is shown →

05

How current is the library?

The library is versioned. When a provision changes, affected questions are updated and the change is recorded, so a 2025 assessment and a 2026 reassessment can be compared. See where this is shown →

Yes. Import your existing questions or add them to any domain. They sit alongside the library, are scored under the same rubric, and carry a Custom source tag in the ledger and every export, so a reviewer can always tell which questions were yours and which came from the library.

Running a review
★

Can we use our existing questionnaire?

Yes. Your existing questions come with you. Add them to any domain; they are scored under the same rubric, tagged as yours in the record, and exported with a custom-source marker. AITPRM maintains the library; you choose the questions to ask. See where this is shown →

01

How long does a vendor take to respond?

Response time depends on the size of the scoped set and the documentation the vendor has on hand. They see only the questions that apply and can attach evidence directly to each. See where this is shown →

02

What if a vendor refuses a question?

A declined answer scores 0 and generates a finding. The organization decides whether to accept the risk, condition the contract or decline the vendor. The response is recorded as part of the assessment. See where this is shown →

03

Can we review a vendor we already use?

Yes. Renewal reviews load the existing contract as a baseline and focus on the terms you can still set. See where this is shown →

04

Who needs a seat?

Anyone who reviews. Seats are unlimited, so compliance, privacy, security, legal, clinical and procurement can all participate. See where this is shown →

Data and security
01

Does AITPRM Health touch PHI?

No. The service evaluates how a vendor builds and operates its AI. It does not connect to clinical, billing or EHR systems and does not process patient data. See where this is shown →

02

Who owns the record?

You do. Questions, answers, evidence, findings and decisions export in full at any time, including after termination. See where this is shown →

03

Where is the service hosted?

In the United States, with encryption in transit and at rest, role-based access and a full audit log. Security documentation is available through the contact form for procurement review. See where this is shown →

Next step

Ask the question that is not here.

Thirty minutes covering scoping, the portal, scoring and contract controls against a deployment like yours.