Built for Utah businesses
(435) 227-5583

Senior Care & Skilled Nursing IT

Your staff are already using AI. Nobody has told them what they are allowed to do with it.

A folder of signed vendor agreements that stopped being complete about four vendors ago, and a floor that runs 24 hours a day. We do the IT and the evidence behind it, for skilled nursing and assisted living across Utah.

The environment we work in

  • PointClickCare
  • Med cart tablets
  • Shared station logins
  • Resident & guest Wi-Fi

What we find in facilities

The clinical system is fine. It is everything around it that fails a review.

Long-term care runs 24 hours a day on shared devices, contract staff, and a vendor list longer than most hospitals of the same size. That is a different environment from an office with desks and email, and the gaps show up in the same places every time.

  • F-01

    Everyone on nights signs in as the station

    It is faster, and it is how the floor has always worked. Then someone asks who opened a resident record at 2am and the honest answer is that nobody can say. Named accounts scoped to the unit, fast enough that staff keep using them, is the fix.

  • F-02

    Staff paste resident details into a chatbot

    Usually to make a note read better, usually with good intentions. Consumer AI tiers carry no business associate agreement, which makes that a disclosure. Nobody has given the floor a written rule or a tool they are allowed to use.

  • F-03

    The BAA folder is three vendors deep

    Pharmacy, therapy contractor, billing service, transport, answering service, shredding. Every one of them touches resident data. Most facilities can produce a few agreements and assume the rest were handled at some point by somebody.

  • F-04

    The med cart tablet has no lock and no owner

    It rolls down the hallway, sleeps unlocked, and belongs to no one on the asset list. Same for the fax machine still receiving hospital discharge summaries into an open tray at the nurses station.

  • F-05

    Resident and guest Wi-Fi is the clinical network

    Families expect Wi-Fi and they should have it. When it is the same flat network the clinical workstations and the nurse call system sit on, one compromised laptop in a resident room reaches everything.

  • F-06

    Turnover leaves accounts open behind it

    Agency and contract staff rotate constantly, and offboarding is a payroll step rather than an access step. Accounts stay live for months after the last shift, which is the finding nobody wants read back to them.

Where facilities start

Start with what a reviewer would ask for. Fix it in scoped pieces.

You do not need a transformation project. You need to know which of the gaps above exist in your building, which ones carry real exposure, and what each fix costs before you commit to it. The ladder starts with a baseline assessment; scoped engagements handle what it surfaces.

The question facilities ask us first has its own write-up: can nursing home staff use ChatGPT with resident data.

  1. 01

    Baseline assessment

    A low-cost snapshot of devices, accounts, network, and vendor paperwork.

  2. 02

    HIPAA readiness engagement

    Security Risk Analysis, BAA register, and the written policies behind them.

  3. 03

    Remediation roadmap

    A prioritized plan with owners and dates you can hand to a board.

  4. 04

    Scoped projects

    Fixed-quote delivery of the network, access, and device work it calls for.

Not sure where you stand? Start with a baseline assessment.

HIPAA readiness engagement

The top rung of the ladder, done for you

Scoped and quoted first

Security Risk Analysis

Asset inventory, network diagram, threat table, access review, and a remediation plan with owners and dates. The document a reviewer expects to already exist.

BAA register and gap chase

Every vendor that touches resident data, what they hold, whether an agreement is signed, and when it renews. We chase the missing ones rather than listing them for you.

AI acceptable-use policy

A written rule your floor staff can actually follow, plus a decision on which tool they are permitted to use, so the answer stops being whatever is on their phone.

Scope an engagement

We prepare the evidence. We are not your surveyor, and HIPAA readiness is work we deliver, never a certification we hold. How the framework work runs.

The building, not just the records

A survey looks at your paperwork. Your staff lives with the wiring.

Compliance evidence is one half of this. The other half is a building full of low-voltage equipment that someone has to keep working, and that most IT shops will not touch.

  • The network under the systems you already bought

    Your wander management, nurse call, and access control came from specialists, and they are only as reliable as the network they sit on. When the vendor says it is a network problem, that is the part we own.

  • Cameras and recording in common areas

    Placement, install, and repair of an existing system. Recorder setup wired or wireless, footage retention set to the window your policy and your state require, and the recordings backed up on the same schedule as the rest of your data.

  • Wi-Fi that reaches the whole floor

    Med carts, tablets, and family devices all compete for the same air. Access point placement validated after install, not guessed at from a floor plan.

  • A review of what is already installed

    If you inherited a camera or access system nobody documented, we will audit it, tell you what it actually does, and troubleshoot it. We do not install burglar alarm or access control, and we hold no ongoing access to your footage.

Cabling, cameras, and phone work is quoted per job. How install work runs.

Senior care FAQ

What administrators ask first

AI and resident data, BAAs, surveys, and what happens on the floor at 2am.

Not the consumer tiers. Free, Plus and Team plans do not come with a business associate agreement, so putting protected health information into them is a disclosure, regardless of intent. The enterprise and healthcare tiers can be covered once your organization signs a BAA with the vendor. The practical answer for most facilities is a written acceptable-use rule plus one approved tool, so staff have somewhere legitimate to go instead of their own phone. We walk through that decision in more detail here.
We support the environment around it: workstations and med-cart devices, the network the carts roam on, accounts and access, printing and scanning, and the connectivity that decides whether charting is fast or miserable. We are not a clinical implementation consultancy and we do not configure clinical workflows. When something is genuinely inside the application, we work the vendor ticket with your team rather than pretending it is ours.
It covers their platform. It does not cover the pharmacy, the therapy contractor, the billing service, the transport provider, the answering service, or the shredding company, and every one of those touches resident data. Building the register of who needs an agreement, chasing the missing ones, and keeping renewal dates visible is part of the HIPAA readiness engagement. Ours is at app.techgig.ai/baa.
We prepare the technology side and the documentation behind it: Security Risk Analysis, asset and vendor registers, access reviews, written policies, backup restore evidence, and an incident response runbook. What we are not is your surveyor, your consultant on clinical standards of care, or a certifying body. We build the evidence; the review is still the review.
The reason shared logins persist is that the alternative was slower, so any fix that adds seconds at the cart gets abandoned in a week. We look at badge or PIN sign-in, session persistence on the device, and unit-scoped accounts, then pilot on one unit before touching the rest of the building. If it does not survive a night shift, it is not the right answer.
Not today, and we would rather say that than invent one. Dental, legal and a few other verticals have fixed-scope Foundation bundles behind them; senior care does not yet. What exists is the assessment ladder and scoped engagements, each quoted before it starts, with a flat monthly plan underneath for day-to-day support.
Usually. Our technicians are background-checked contractors across Utah rather than staff in one office, which is how a facility outside the Wasatch Front gets someone on site at all. Dispatch targets vary by area, so tell us where your buildings are and we will be straight about which ones we cover well today and which ones would be remote-first for now.

Bring the question you have not been able to get a straight answer on.

Free, 30 minutes. Bed count, which clinical system you run, and whichever vendor conversation is currently stuck.

Book a facility consultationSee pricing

Prefer the phone? (435) 227-5583

Built for 5-50 person firms