AI Readiness Assessment

Structured intake to evaluate whether a planned AI use case is ready to deploy in your environment — data, security, regulatory, ethical, and clinical risk dimensions assessed against your existing privacy posture. Documented, audit-ready artifact.

AI Risk Assessment

Continuous risk evaluation for AI systems already in operation. Bias, drift, exposure, vendor risk, model-update tracking, and audit-trail completeness — mapped to NIST AI RMF, HIPAA, OCR audit protocols, and emerging state AI laws.

AI Policy Library

Pre-built, customizable AI-acceptable-use policies, data-handling agreements, and vendor-AI BAAs. The same template-and-enforce model that powers privacy policy library, extended to AI.

Privacy Program Risk Analysis

Identify vulnerabilities with automated risk assessments to close compliance gaps before they become violations.

Privacy Incident Management

Automate tracking, filing, and resolution of privacy incidents to ensure timely compliance reporting and breach notification.

Privacy & Security Risk Assessments

Web-based, audit-ready process for managing complex compliance assessments. Goodbye, spreadsheets.

Requests for Amendments & Restrictions

Manage patient data requests efficiently, ensuring compliance with regulatory guidelines.

Accounting of Disclosures

Track all patient data access and disclosures, maintaining transparency and audit readiness.

Business Associate Tracking

Automate third-party risk management. Ensure vendor compliance with HIPAA and other data protection regulations.

Privacy Policy Template Library

Pre-built, customizable templates to enforce policy consistency across your organization.

CPS Insights

Analytical decision-making for healthcare privacy data. Enterprise dashboards across all modules. The CPS Insights module is the only place CPS One uses Aether One™ — for analytical pattern detection and dashboard reporting only. Privacy data is not used for AI training; the rest of CPS One operates on deterministic workflows by design.

Breach Notification Engine

Automated workflows for HIPAA Breach Notification Rule compliance — affected individuals, HHS OCR, media notification thresholds.

Mitigate risk. Maintain compliance.

Sanctions screening across federal and state exclusion databases — with batch capacity, ongoing monitoring, and audit-ready evidence at every step.

• Broad coverage
  OIG, GSA, federal & all state exclusion databases — nothing slips through.
• Batch screening
  Screen any size employee or vendor list as often as needed.
• Ongoing monitoring
  Automated recurring checks for new hires, vendors, and new exclusion additions.
• Adverse-match resolution
  Investigate, adjudicate, and document false positives with full case management.
• Audit-ready reports
  Summary statistics and detail reports — fully defensible documentation at every step.

Every voice heard. Every report secure.

Anonymous incident reporting with secure two-way communication. Designed for the moments when an employee, contractor, or patient needs to raise a concern without exposure.

• Multi-channel reporting
  Online, phone, voicemail, and mail — all anonymized and securely transcribed.
• Real-time reviewer alerts
  Designated reviewers are notified the moment a report is submitted.
• Secure two-way communication
  Reviewers communicate with anonymous reporters through an encrypted portal.
• Collaborative case management
  Full documentation and audit trails shared only with those who need to know.
• Role-based confidentiality
  Access is limited to authorized personnel — maintaining reporter trust at every step.

Providers, payers, and health-tech.

Designed for organizations of every size — from physician practices to integrated delivery networks to national plans. Same platform, same audit posture.