AI Governance Starter
Three weeks, $8,500, fixed. We find every AI tool already in use, including ones staff signed up for on their own. Then we write the policy, the review rules and a one-page board summary, which together name who is in charge of those tools.
Prefer to skip the call? Get a written proposal
Led by Tyler Kent, who has worked with Medicare claims data under HIPAA and CMS rules and with clinical trial data for FDA submissions. His background
Built for
- Organizations where staff use AI tools with no written policy
- Compliance and IT leaders approving AI requests one at a time
- Boards asking who is responsible for AI
- Health-tech companies that need a written AI policy and inventory before a customer's security review asks for them
Why it's worth it
Today
Staff use AI tools that IT never approved, and requests get decided one at a time. When the board asks who is responsible for AI, nobody has a clear answer.
After
You know every tool in use and who owns it. Staff have rules they can follow, each new request goes through a set review, and the board gets one page it can read in five minutes.
What you get
Week 1
AI inventory
Every AI tool in use, found in IT records, vendor contracts, expense reports and an anonymous staff survey that asks what people use on their own.
Week 2
AI use policy and risk tiers
A plain-language policy (some call it an acceptable-use policy), with each tool placed in a risk tier: how much review it needs. A tool that drafts emails needs less than one that reads patient records.
Week 2
Vendor and BAA checklist
The questions every AI vendor answers in writing before a contract, including where patient data goes and whether it trains their models. A BAA is the business associate agreement HIPAA requires before a vendor handles patient data.
Week 3
Committee charter and board summary
Who decides, how often they meet and what they review, plus one page your board can read in five minutes. Every document comes as an editable file in your own template.
Why now
A federal rule in force since May 2025 (45 CFR 92.210) covers healthcare organizations that receive federal funds, such as Medicare Part B payments. They must make reasonable efforts to find any decision support tool used in patient care, AI included, that uses race, color, national origin, sex, age or disability as an input, and to reduce the risk that it discriminates.
In September 2025 the Joint Commission and the Coalition for Health AI published guidance on responsible AI use. Its recommendations start with AI policies and include testing each tool on your organization's own data and monitoring it once it's in use.
Who does the work
Tyler Kent
Tyler has 13+ years in data science and analytics, most of it in healthcare, including Medicare claims work under HIPAA and CMS rules and clinical trial data for FDA submissions. He has also advised organizations on how to start using AI, which is when written rules matter most.
The AI systems he built have checks of their own. Sentinel audits a public healthcare data platform for errors every morning, and a person reviews every insight and visual before it reaches the platform.
courses on AI adoption taught to leadership teams and staff
AI products designed and shipped to production
years in data science and analytics, most of it in healthcare
peer-reviewed journal papers, including JAMA Network Open
Price
One fixed price, written into your proposal. Nothing is billed by the hour.
AI Governance Starter
For organizations with AI in use and no rules yet
Price: $8,500
One time
3 weeks
Every AI tool found, rules for using them, and a named group in charge.
What's included in AI Governance Starter
- An AI inventory, with an anonymous staff survey
- A plain-language AI use policy
- Each tool placed in a risk tier, with the review that tier needs
- A vendor and BAA checklist
- A committee charter and a one-page board summary
- Every document editable, in your own template
Need only a one-page policy for now? Start with the AI Leadership Workshop for $3,500, one time, credited toward the Starter within 90 days.
Payment and terms
- Half at signing and half at delivery
- Paying by purchase order? There's no deposit: we invoice half at kickoff and half at acceptance
- No patient data needed
- You own every document
Start and finish dates are set in writing in your proposal.
Questions
Is this legal advice?
No. Kent Applied does not give legal advice. The policy and charter are working documents for your counsel or compliance lead to review before adoption.
Why survey staff?
In a December 2025 survey of 518 hospital and health system providers and administrators, done for Wolters Kluwer Health, 57% said they had come across or used an AI tool their organization had not approved. An anonymous survey asks staff directly, so it can find tools that never show up in IT records or expense reports, and the answers show what staff need the approved tools to do.
How is this different from the workshop's policy draft?
The AI Leadership Workshop drafts a one-page policy from what your leaders know. The Starter finds every tool in use, writes the full policy, sets the review for each risk tier and gives a committee its charter. If you've done the workshop or the training program, the Starter builds on that draft, and the workshop's fee counts toward it within 90 days.
Does this need patient data?
No. The work uses contracts, IT records, expense reports and survey answers.
What happens after the three weeks?
From then on, your own AI committee runs the program, using the charter we wrote for it. Some organizations add a fractional AI and data lead to chair it and keep the inventory current, or train staff on the new rules.
How an engagement worksQuestions about prices, payment and patient data
Book a 20-minute call
Tell us which AI tools you know about and which ones you suspect. If we can help, you'll get a fixed-price proposal within 48 hours.
Prefer to skip the call? Get a written proposal
Or email tyler@kentapplied.com, or connect on LinkedIn.