What problem does it solve? Teams building or reviewing US healthcare software risk exposing PHI through logs, analytics, LLM prompts, or unvetted vendors, and need a clear HIPAA-specific entrypoint that routes work to the right compliance checks. ## Core Features & Use Cases - HIPAA Decision Gates: Determines whether data is PHI, whether actors are covered entities or business associates, and whether a BAA is required before vendors touch data. - PHI Guardrails: Blocks PHI from logs, analytics events, URLs, browser storage, prompts, and error strings while enforcing minimum necessary access and audit trails. - Skill Routing: Delegates implementation rules to healthcare-phi-compliance and escalates clinical or regulated architecture decisions to healthcare-reviewer. - Use Case: When asked to add AI-generated visit summaries to a clinician dashboard for US clinics, this Skill verifies BAA coverage for the summarization provider and reviews PHI movement before any data is sent. ## Quick Start Ask the AI to review your healthcare feature for HIPAA compliance, for example whether sending patient messages into an analytics stack is acceptable.
