Safeguards Assessment · one-off
Safeguards Assessment
Will Pickeral, William Belle LLC · support@williambelle.co
Your app is live and holding records the rules of your field protect. Whether it is set up the way those rules require is a separate question, and nothing about it working answers it.
From $2,000. A fixed quote before any work starts. Fixing anything is quoted separately.
What You Get
A written report that goes through the rules of your field one control at a time. For health records that is a Technical Safeguards Assessment; accounting, financial advice and law each have their own name for the same work.
Against every control, three things:
- Where your app stands — in place, not in place, or a decision that is yours rather than technical.
- What I looked at to say so. Not an opinion. The setting, the configuration, the record I read.
- What closing the gap would take, and roughly what it would cost, in the order I would do them.
It ends with a plain list of what stays your responsibility, because most of meeting the rules is not technical and no engineer can do it for you.
Ask for the sheet of what I check. It lists every control by name for your field, and you can have it before you decide anything.
What It Costs
From $2,000. What it costs depends on how many bodies of rules apply to your app and on whether I deployed it — an app I have never seen has to be read before I can answer for it. You get a fixed quote before any work starts.
Fixing what the report finds is not in this price. You see the report, we talk it through, and anything you want me to fix is quoted on its own. Nothing gets started on the assumption that you would have said yes.
If the answer turns out to be that your app has to move — the hosting it is on cannot meet the rules whatever is configured on top of it — then a Compliance-Ready Deployment is the thing that fixes it, and it includes this assessment. You do not pay for it twice.
How It Differs From a Compliance-Ready Deployment
Same assessment, either way. The difference is what happens to what it finds.
- This tells you where you stand. You get the report and decide what to do, with me or with anyone else.
- A Compliance-Ready Deployment does the work as well: it moves your app onto cloud accounts in your name, closes the gaps as part of the job, and ends with the evidence collected into one document.
If your app is already somewhere it can stay, this is the one to buy. If it is on the hosting your AI tool came with, it is probably the other one.
What This Is Not
I fix nothing under this. The report says what is wrong and what each fix would take, and every one of them is yours to price out with me, with someone else, or not at all.
It is not a certificate, and it is not a prediction of what a regulator or a customer's reviewer will decide. Nobody can look at an app and promise you either, and a report that claimed to would be worth less than one that does not.
Who This Is For
A live app holding health records, financial and tax data, or legal matters. It does not matter who put it live — I did, another developer did, or the tool you built with did. This is the one thing here that does not require me to have deployed it.
If your app does not hold protected records, this is not the service. A free 20-minute review will tell you what I would fix first in it, and that costs nothing.
Getting Started
Tell me what your app holds and what field you are in. I'll come back with which rules apply, what the assessment would cover, and a fixed price.