📁 Other
HIPAA BAA Vendor Screening Map from Vendor Inventory (No Invented Breach Counts)
Build a HIPAA BAA vendor screening map from a pasted vendor inventory only. No invented breach counts, fine totals, or audit scores. Not legal advice.
0Reviews
Prompt
Act as a HIPAA BAA vendor screening cartographer who only uses a pasted vendor inventory. You map vendors, BAA status cues, and screening checklist rows the inventory already supports. You do not invent breach counts, fine totals, audit scores, or patient volumes. This is not legal advice, not a compliance certification, and not medical advice. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - Vendor inventory I lock (vendors, BAA status cues, systems, owners): [Inventory] - Policy or program version notes I lock: [Version] - Org or program label I may quote (or UNKNOWN): [OrgLabel] - Vendor names I may quote (or UNKNOWN): [VendorNames] - BAA status cues already present (or UNKNOWN): [BaaStatus] - System or PHI touch cues already present (or UNKNOWN): [SystemCues] - Owner or reviewer cues already present (or UNKNOWN): [OwnerCues] - Words I must not use: [Banned] - What I must never invent (breach counts, fine totals, audit scores, patient volumes): [Never] - Output format: [Format] - Language: [Lang] Generate: 1. Honesty ledger: Inventory nouns, Version, OrgLabel, VendorNames, BaaStatus, SystemCues, OwnerCues, Lang. Forbidden: invented breach counts, fine totals, audit scores, patient volumes. Print a one-line not-legal-advice banner. 2. Vendor screening table: one row per VendorNames entry. Columns: vendor, BAA status cue, system cue, owner cue. Empty cells NOT IN INPUTS. 3. BAA gap sketch: list vendors whose BaaStatus is missing or UNKNOWN. Do not invent Signed on dates. 4. System touch caution: quote SystemCues only. Do not invent EHR module names absent from Inventory. 5. Refuse list: inventing 3 breaches, inventing $2M fine, inventing 98 audit score, inventing 40k patients. 6. Compliance pass: quote Banned and Never hits. Cut them. Print vendor counts from Inventory only. Format as Format. Constraints: - BAA vendor screening map from Inventory only. No invented breach counts. - Honor Version. No emojis. Not legal advice.
Instructions
Replace every [bracket] with your details before running. Works on ChatGPT, Claude, and Gemini.
Generated Output
This image was generated using the prompt above.
Examples
Example Input
Inventory: vendor Harbor Fax Relay as pasted BAA status Signed cue as pasted; vendor Harbor Imaging Cloud as pasted BAA status Pending cue as pasted. Breach invent NONE. Fine invent NONE. Version: Harbor HIPAA vendor program 2026 as pasted (do not invent OCR audit outcomes) OrgLabel: Harbor Quay clinic vendor desk as pasted VendorNames: Harbor Fax Relay as pasted; Harbor Imaging Cloud as pasted. Billing vendor UNKNOWN. BaaStatus: Signed as pasted for Fax Relay; Pending as pasted for Imaging Cloud. Expiration dates UNKNOWN. SystemCues: fax relay touches ePHI as pasted; Imaging Cloud PHI touch NOT IN INPUTS. OwnerCues: Fax owner Ops Lead as pasted; Imaging owner UNKNOWN. Banned: 3 breaches, $2M fine, guaranteed HIPAA compliant Never: invent breach counts, invent fine totals, invent audit scores, invent patient volumes Format: ledger + screening table + BAA gap sketch + system caution + refuse + compliance Lang: English
Example Output
1. Ledger. NOT LEGAL ADVICE. Inventory: vendor Harbor Fax Relay BAA Signed; vendor Harbor Imaging Cloud BAA Pending. Breach invent NONE. Fine invent NONE. Version Harbor HIPAA vendor program 2026. OrgLabel Harbor Quay clinic vendor desk. VendorNames Fax Relay; Imaging Cloud. BaaStatus Signed; Pending. SystemCues fax relay touches ePHI; Imaging Cloud PHI touch NOT IN INPUTS. OwnerCues Ops Lead for Fax; Imaging owner UNKNOWN. Lang English. Forbidden: invented breach counts, fine totals, audit scores, patient volumes, 3 breaches, $2M fine, guaranteed HIPAA compliant. 2. Vendor screening table. Harbor Fax Relay | BAA Signed as pasted | system fax relay touches ePHI as pasted | owner Ops Lead as pasted. Harbor Imaging Cloud | BAA Pending as pasted | system PHI touch NOT IN INPUTS | owner NOT IN INPUTS. Billing vendor not added. Expiration dates UNKNOWN. 3. BAA gap sketch. Harbor Imaging Cloud Pending (no Signed cue). Expiration dates UNKNOWN for both. Do not invent Signed on 2025-01-01. 4. System touch caution. Fax relay touches ePHI as pasted. Imaging Cloud PHI touch NOT IN INPUTS. Do not invent EHR module names. 5. Refuse. 3 breaches: refused. $2M fine: refused. 98 audit score: refused. 40k patients: refused. OCR audit outcome claims: refused. 6. Compliance. Banned hits none. Vendors 2. Format ledger+screening table+BAA gap sketch+system caution+refuse+compliance. Gaps: Imaging PHI touch, Imaging owner, Billing vendor, expiration dates, Signed dates. Missing-data policy: if a field was blank, write NOT IN INPUTS rather than guessing. Lock any tool version named in Inputs; if unnamed, write unknown. No invented testimonials, star ratings, or press logos. If legal, clinical, insurance, HR, education-plan, or veterinary content appears, add a one-line not-advice and de-identify banner. Quote banned-word hits and cut them. End with a gaps list of five bullets the user still owes you. Character and byte caps in the job are hard; print counts when relevant. Refuse to backfill DOIs, exam dumps, PHI, PII, or compensation promises not in Inputs.