Question 10: What practice management and billing systems do you use? Why it matters: compatibility with your EHR determines the smoothness of the transition and ongoing operations. Great answer: experience with multiple major EHR and PM systems (eClinicalWorks, athenahealth, AdvancedMD, Kareo/Tebra, NextGen, Epic, Cerner), with the ability to work within your existing system or provide one if needed. Red flag: requires you to switch to their proprietary system, or only works with one platform. Question 11: How do you ensure
HIPAA compliance? Great answer: signed BAA before any PHI access, annual Security Risk Assessment, 256-bit encryption for data at rest and in transit, role-based access controls, regular staff training, documented incident response plan, and willingness to share their most recent SRA summary or
SOC 2 report. Red flag: vague assurances of compliance, no BAA offered proactively, cannot describe specific technical safeguards, or has never conducted an SRA. Question 12: Do you use AI or automation in your billing process? Great answer: yes, with specifics. AI-assisted claim scrubbing,
denial prediction models, automated
payment posting with variance detection, automated
eligibility verification. They should also confirm human oversight on all AI outputs. Red flag: claims to use AI but cannot describe what the AI specifically does, or relies entirely on manual processes with no automation.