/Sentry/
A HIPAA-compliant AI risk assessment tool that evaluates every AI use case before it touches a single patient record.
James needed a tool to assess AI use cases across his healthcare organisation before they went near PHI. We built a web-based rules engine aligned with the HIPAA Security Rule (45 CFR §164) that evaluates risk deterministically — no guesswork, no hallucinated compliance advice. Every assessment produces a structured risk report with actionable remediation steps.
/Project Goals/
Make HIPAA AI risk assessment fast, repeatable, and auditable — removing the need for expensive compliance consultants on every new AI deployment.
Healthcare organisations were deploying AI tools without a structured compliance check. The tool needed to evaluate each use case against specific HIPAA Security Rule controls, produce a risk score, identify which safeguards were missing, and generate an audit-ready report. Speed and legal accuracy were equally critical — one wrong output could mean a regulatory penalty.
/Results/
Risk assessments that took consultants three days now complete in under four minutes with full audit trail documentation.
The tool reduced compliance assessment time from three consultant days to under four minutes per use case. The client ran 47 assessments in the first month, identifying compliance gaps across 12 AI tools already in production. Two high-risk deployments were paused before causing violations. Legal costs associated with manual HIPAA review dropped significantly across the organisation.
HIPAA ComplianceSQLAI Risk AssessmentWeb ApplicationRules EngineHealthcare AI