ProofOps Medical
What your compliance desk covers
HIPAA Compliant Business Associate · BAA signed first

Our 32-Point Managed
Compliance Framework.
So you don't have to.

Think of this as your done-for-you operational checklist — thirty-two compliance checks, each covering one specific job: chasing vendors, pulling chart-review samples, screening staff against OIG, preparing your AHCA response, assembling the inspection binder. Technology does the heavy lifting; a real person on your compliance desk reviews and signs off, and flags only the few decisions that actually need an owner's eye. You see the answers. We handle the work.

32
Compliance checks covered
Each focused on one specific job
24/7
Always on
Daily scans · weekly briefs
9
Regulatory frameworks
HIPAA · OSHA · AHCA · OIG · DEA · FDA · § 458 · 64B8 · 64E-16
~90 min
Of your time in setup
Over the first 30 days, total
How the framework is organized

Thirty-two checks. One job each. A real person over all of them.

  • 1 Concierge desk — bilingual EN/ES; handles ad-hoc lookups and ongoing mobile-text questions from your team.
  • 19 Operational checks — each covers one discrete job: chasing vendor BAAs, producing monthly OIG/LEIE proof-of-screening certificates, pulling randomized chart-review samples for MD approval, verifying GFE documentation.
  • 11 Monitoring checks — continuous back-end verification. Five are vertical-specific, switching on only for the clinics running GLP-1 compounding, TRT, IV hydration, or regenerative.
  • 1 Knowledge desk + draft preparation — prepares ready-to-execute Phase A OIG Self-Disclosures and Phase B-1 FIPA breach-response files for your attorney's signature.
0
Hallucinated citations, by design

Every check draws on a version-controlled Florida Regulatory Brain, and cites only what is written in it — never improvising a statute, inventing a deadline, or paraphrasing a rule from memory. When a citation lands in your file, it traces to a specific, current Florida or federal authority — and a real person on your compliance desk reviews and signs off on every flagged finding before anything is acted on.

The technology carries the volume. A real person carries the judgment.

You don't run it. You just see it.

Check on everything, live, anytime.

We do the work behind the scenes. You get a clean, always-current view of exactly where your clinic stands — and the moment an inspector shows up, the whole binder is one click away.

Your live readiness view
A live readiness view showing the clinic's compliance score and what is handled versus pending

Check on everything, live, anytime. Your readiness score, what’s handled, and the handful of things waiting on you — one glance, from your phone or your desk. We keep it current; you just look.

One-click inspection pack
The inspection-pack screen: pick the scenario and the complete auditor-ready PDF assembles in one click

Inspection at the door? One click. Pick the scenario — AHCA, Board of Medicine, OCR, attorney records request — and the complete, bound PDF assembles itself. Hand the auditor one file, or print it on the spot.

New in 2026 Phase A · Phase B-1 · May 2026

Prepared federal scaffolds, audit-grade proof artifacts, inspection-ready patient records.

OIG SDP draft preparation (Phase A) prepares a 7-page Office of Inspector General Self-Disclosure Protocol scaffold the moment an LEIE/SAM federal-exclusion match is confirmed. FIPA notification draft preparation (Phase B-1) prepares the three Florida Statute § 501.171 letter scaffolds — individual notification, FL AG notification at 500+ FL residents, and consumer reporting agency notification at 1,000+ nationwide — the moment an incident is classified as a confirmed breach. OIG/LEIE screening certificates (May 2026) produce a one-page PDF per screening run capturing date, time, dataset version, method, and result — filed into the inspection binder as evidence, not as a "screening was performed" claim. Inspection-ready patient records with a per-patient chart view (GFE, consents, encounters, drug administrations) make the AHCA "show me 5 charts" demand a one-click export, and a Patient Records Integrity factor on the readiness score actually reflects whether patient data is complete. Location-scoped inspection binders ship the right binder for the right address. Drafts route to your attorney; ProofOps never submits.

1
Your paperwork stays current

Every document filed, checked, and watched.

Upload, forward, or photograph anything compliance-related — these four checks make sure it ends up in the right folder, that the dates make sense, and that nothing slips past its expiry date.

Check 01Paperwork

White-Glove Intake

Your front desk simply forwards every PDF, photo, or email to a dedicated secure inbox. Each record is reviewed, tagged, logged, and filed for you in the right folder — a BAA, a license, a manifest, a training certificate. Anything unclear is checked by a real person before it's accepted. No EHR integration project, no setup headache. You don't lift a finger.

Check 02Paperwork

Document checker

Catches the small mistakes that get clinics cited. Missing expiry dates. Inverted dates. Records older than they should be. Each one is flagged with a plain-English explanation of what to fix — reviewed and signed off by a real person before it reaches you.

Check 03Paperwork

Expiry watcher

Tracks every license, training certificate, malpractice policy, and BAA. A calm heads-up reaches the right person 60, 30, and 7 days before anything expires — so nothing lapses while you're busy.

Check 04Paperwork

Findings inbox

One inbox where every check posts what it caught. Filter by severity. Resolve with a note. Dismiss with a reason. Every action is logged so you can prove the chain of custody to an inspector.

2
Your license stays clean

Cross-checks the lists that get clinics in trouble.

Two checks run quietly in the background, done for you. If something hits one of these lists, you find out the same day — not when an inspector or an insurer does.

Check 05License

Monthly Staff Exclusion Screening Phase A

Every 30 days, your active staff are screened against federal (OIG/LEIE) and state exclusion lists. You receive a signed, dated certificate of clearance for your binder capturing date, dataset version, screening method, sources searched, and result — filed into the inspection pack as oig_leie_screening_log evidence. When an AHCA or BoM auditor asks "show me you screened Dr. Singh on May 1, 2026," you hand over the bound, signed exhibit, not a database query. On a confirmed match, your compliance desk prepares a 7-page Office of Inspector General Self-Disclosure Protocol scaffold — 42 USC § 1320a-7b(f) compliant. Your attorney finalizes; ProofOps never submits.

Check 06License

Florida DOH MQA verifier — live

The Florida DOH Medical Quality Assurance public license-verification portal is checked once every 24 hours for every Florida-licensed staff member. The moment a status flips (active → suspended, expired, delinquent, null and void, new disciplinary action) a danger-severity finding is raised with the relevant statute and reviewed by a real person. Polite, respectful lookups: 1 request per 5 seconds, identifying User-Agent.

3
Your medical director's life, simplified

The MD signs from their phone. Everything ties back.

Three checks make sure the Florida supervisory rules (§ 458.348) are met without your MD burning weekends. The supervisory pack stays current. GFE records are structured. Chart reviews are on the calendar.

Check 07MD

MD agreement manager

Holds the signed supervisory agreement, the 25-mile attestation, the MD's license and DEA, and the list of supervisees. Renewals are signed online — no chasing PDFs, no expired agreements.

Check 08MD

Good Faith Exam recorder

Your front desk texts “Botox JD today, Dr. Patel, 40 units” from their phone. The structured GFE record is captured for you. The MD co-signs from their phone over lunch. Done. Defensible.

Check 09MD

Chart-review sampler + log

Every Monday at 9:30 AM ET, ProofOps draws a random ~10% sample of the prior week's non-MD GFE charts and queues them for the MD's review. The MD clicks Review or Skip (with reason) on each one — both write a structured row to the supervisory log with signature + timestamp. The exact cadence § 458.348 enforcement asks about, finally provable per chart.

4
Vendors and products stay traceable

Stericycle, Allergan, Olympia — handled.

Three checks work the supply side, done for you. Vendor emails get chased, replied to, and filed. Product lots get tagged so you can trace any vial to its invoice. Waste manifests don't get lost.

Check 10Vendors

Vendor chaser — drafted AND sent for you

Polite, tone-graded follow-ups (gentle ≤7 days · firm 8–14 · final >14) are drafted and sent on your behalf from ops@proofopsmedical.com — replies land in your compliance desk's inbox. Every send is timestamped and audited. Stericycle, Allergan, Olympia, your 503B pharmacy, your malpractice carrier — same loop. You see a digest, not 200 emails.

Check 11Products

Lot + batch tracker

Every IV bag, every GLP-1 vial, every BHRT pellet logged with its lot number and invoice date. If there's ever a recall or a patient question, you can trace which patient got which lot in 30 seconds.

Check 12Waste

Sharps + waste tracker

Your biomedical waste plan (FAC 64E-16), your county registration, your pickup cadence, your manifests — all tied to your Stericycle inbox. Missed pickups get flagged the same day, not at inspection time.

5
Ready when an inspector walks in

From “they're here” to a complete PDF in 60 seconds.

Four checks make sure the moment AHCA, the Board of Medicine, the DEA, or OCR shows up, you don't scramble. The score tells you where you stand. The binder is assembled for you. The complaint response is pre-built before the 20-day clock starts.

Check 13Readiness

Readiness scorer

A single 0–100 number across all nine frameworks. Drops when something expires or goes missing. Rises when you fix it. The morning-coffee signal — would I pass an inspection today, yes or no.

Check 14Readiness

Drift watcher + Quarterly Compliance Drills

Notices when your readiness score drops by 5+ points overnight and alerts you with the exact reason — “Vendor BAA expired” or “Staff license lapsed.” And each quarter, a compliance specialist reviews your operational posture and walks your team through a mock inspection against nine Florida scenarios.

Check 15Readiness

Inspection-binder assembler

One tap → a complete PDF binder targeted at the agency that's asking. Different cover letter and different exhibits for AHCA, Board of Medicine, DEA, OCR, or your attorney. Hours of work compressed into one button.

Check 16Readiness

Complaint response builder

The moment a § 456.073 complaint inquiry hits, the 20-day response clock starts. Your draft response pack is assembled for you the same day so your attorney has material to work with — not a panicked weekend of folder-digging.

6
Help for the people doing the work

Front-desk friction, removed.

Four checks keep the human side easy. New hires get walked through compliance on day one. Owners get a five-bullet morning brief. Anyone with a question gets a cited answer in seconds. Insurance renewals are pre-built before the carrier asks.

Check 17People

Onboarding coach

Every new hire gets a bilingual SMS thread that walks them through I-9, OSHA bloodborne pathogens training, license upload, and signed acknowledgments — without you chasing them. They're audit-ready by their first shift.

Check 18Owner

Daily brief

Five bullets every weekday at 9 AM ET. What changed, what's expiring, what needs a signature, what was resolved for you, what to look at today. That's the whole compliance update — delivered to you, nothing to log into.

Check 19Support

Direct Desk Access

Unlimited SMS and chat with your compliance desk for real-time answers on Florida statutes and operations — in English or Spanish. Text “is this allowed in FL?” and get a cited-statute answer. The desk your team reaches before they do something they're not sure about, instead of guessing.

Check 20Insurance

Renewal pack

Your malpractice and general-liability renewal packs are assembled for you 60, 30, and 15 days out from the carrier deadline. When they ask for documentation, you already have it ready. Often earns a 2–5% premium reduction.

7
Done-for-you & founder oversight

We do the work — and a real person watches the floor.

Five checks close the loop between “here's what's broken” and “it's handled.” A single next-best-action card replaces the long to-do list. Recurring filings run on schedule. Vendor chases go out for you. And if your readiness score stays red for three days, the founder personally reaches out within one business day.

Check 21Done-for-you

“Today's one thing” picker

The first thing you see is one concrete next action — not a list, not a score. Drawn from every open signal: danger findings, overdue MD reviews, expired credentials, stale vendor chases, past-due obligations. One tap takes you to the exact page that closes it.

Check 22Obligations

Obligations calendar

Seven Florida med-spa filings seeded per clinic — AHCA biennial renewal, § 893.07 controlled-substance biennial inventory, annual malpractice COI, BAA sweep, OSHA quarterly drill, fire-extinguisher monthly visual, emergency-kit expiration check. You receive 90 / 60 / 30 / 7-day reminders. Mark complete and the cycle resets.

Check 23Founder

Founder score watch

ProofOps captures a snapshot of your readiness score every morning at 7 AM ET. If your score sits below the green threshold three days in a row, the founder is alerted personally and reaches out within one business day — email, phone, or Loom — with a concrete plan to close the gap. Not a canned escalation. A real compliance partner watching your floor.

Check 24Done-for-you

MD chart-review sampler

Every Monday at 9:30 AM ET, ProofOps draws a random ~10% sample of the prior week's non-MD GFE charts and queues them for the supervising physician. The MD clicks Review (with optional pattern note) or Skip (with mandatory reason) — both write to the structured § 458.348 supervisory log with signature + timestamp. The cadence the Board expects, finally provable per chart.

Check 25Done-for-you

FL DOH MQA daily verifier — live

The Florida DOH MQA public license-verification portal is checked once every 24 hours for every Florida-licensed staff member. The moment a status flips (active → suspended, new disciplinary action filed) a danger-severity finding is raised with the relevant statute and reviewed by a real person. Polite, respectful lookups: 1 request per 5 seconds, identifying User-Agent.

Check 26Phase A

OIG SDP draft preparation Phase A

The moment an LEIE/SAM federal-exclusion match is confirmed, your compliance desk prepares a 7-page Office of Inspector General Self-Disclosure Protocol scaffold — 42 USC § 1320a-7b(f) compliant, FL Statute § 501.171 cross-referenced. The draft includes facts of the exclusion match, scope of conduct, financial estimate, corrective action, and the OIG cover letter. It routes to the customer's attorney for finalization; ProofOps never submits.

Check 27Phase B-1

FIPA notification draft preparation Phase B-1

The moment an incident is classified as a confirmed breach, your compliance desk prepares the three Florida Statute § 501.171 letter scaffolds: the individual notification (§ 501.171(4) + 45 CFR 164.404), the Florida Attorney General notification (§ 501.171(3) at 500+ FL residents), and the Consumer Reporting Agency notification (§ 501.171(5) at 1,000+ nationwide). The 30-day FIPA clock is anchored to discovery_date and surfaces in the daily brief. Drafts route to the attorney; ProofOps never files.

8
Vertical-gated watchers

The five checks that only switch on for the verticals that need them.

IV-therapy, weight-loss, TRT, and regenerative clinics carry rule sets a generic med spa never touches. These five checks stay quiet for the verticals they don't apply to and run on a fixed cadence the moment you turn the relevant vertical on — anaphylaxis kit, TRT labs, Rule 64B8-9.012 cohort re-evals, peptide 503A attestations, and the FDA warning-letter index.

Check 28Vertical-gated

Anaphylaxis Kit Watcher

For clinics that inject — IV therapy, med spa, TRT — ProofOps fires a monthly anaphylaxis-kit inventory reminder covering epinephrine, diphenhydramine, and in-date emergency airway. Mark the kit checked and the cycle resets; miss it and a danger-severity finding lands in the daily brief with the cite. The kit the inspector asks to open, on the cadence that proves it stayed real.

Check 29Vertical-gated

TRT Lab Cadence Watcher

TRT-only. Once a patient is on testosterone, ProofOps tracks the quarterly monitoring panel — total/free T, hematocrit, PSA where indicated — per patient and per cycle. Missing a draw past the 90-day mark surfaces a per-patient finding with the date of last labs, so the MD signs review with the cadence the supervisory log actually expects.

Check 30Vertical-gated

Weight-loss Re-eval Watcher

Weight-loss-only. Florida Rule 64B8-9.012 requires quarterly cohort re-evaluation for patients on long-term anorectic / weight-loss therapy. ProofOps snapshots every active patient's last documented re-eval and fires a per-patient finding when the 90-day clock runs out — with the rule cite and the chart link, so the re-eval gets done before the next refill, not after.

Check 31Vertical-gated

Peptide 503A Watcher

Regen-only. Every quarter, ProofOps generates a 503A peptide-compounder attestation — confirming the pharmacy is Florida-registered, the most recent BOP inspection is clean, and the peptides on your shelf trace to a 503A source the FDA hasn't flagged. The attestation routes to the supervising MD for signature and lands in the supervisory log with timestamp.

Check 32Vertical-gated

FDA Warning-Letter Scan

Regen, weight-loss, and med spa. Once a week, ProofOps cross-checks every vendor and compounder on file against the FDA warning-letter index. A new letter against a vendor you use fires a danger-severity finding the same day, with the letter text, the date issued, and a one-tap path to swap supply. The list inspectors and plaintiffs' attorneys read first — read by us, every week, for you.

How it feels in practice

You don't manage 32 checks. You manage one inbox.

Every check posts to a single findings inbox. You see what needs your attention, in order of severity. Each item has a one-tap fix or a one-tap dismiss-with-reason. The hard work of running all 32 compliance checks — that's ours. The one-line answer to “what should I do today?” — that's yours.

Next steps

See it on your own clinic in 20 minutes.

Talk to a strategist. We'll walk you through your actual exposure — not a generic sales tour. You leave with a written readiness summary either way, plus the option to claim a spot in our Founding Cohort — Q2 2026 — with 2 of 5 clinic slots remaining.