abridge-prod-checklist

# Abridge Production Checklist ## Overview Production readiness checklist for deploying Abridge clinical AI in a healthcare organization. Clinical documentation systems are safety-critical — this checklist covers HIPAA compliance, EHR integration validation, provider onboarding, and rollback procedures. ## Pre-Launch Checklist ### Legal & Compliance - [ ] **BAA signed** — Business Associate Agreement executed with Abridge - [ ] **HIPAA risk assessment** — Completed and documented - [ ] **Data flow diagram** — PHI flow mapped: microphone → Abridge → EHR - [ ] **Breach notification plan** — 60-day notification procedure documented - [ ] **Patient consent** — State-specific recording consent requirements met - [ ] **Medical staff approval** — Clinical AI usage approved by medical staff committee ### Infrastructure - [ ] **TLS 1.3** — Enforced on all Abridge API connections - [ ] **Secrets management** — Credentials in secret manager (not env files) - [ ] **Audit logging** — All PHI access logged with 6-year retention - [ ] **Monitoring** — Health checks, latency alerts, error rate dashboards - [ ] **Backup connectivity** — Fallback for Abridge outages (manual documentation) ### EHR Integration - [ ] **FHIR R4 endpoint** — Verified DocumentReference POST works - [ ] **Epic SmartPhrases** — Mapped to Abridge note templates - [ ] **Provider enrollment** — All go-live providers registered in Abridge - [ ] **Specialty configuration** — Licensed specialties configured per con...