Mission
I help healthcare SaaS companies build trust they can prove.
Health systems now ask about AI in the same breath as SOC 2 and HIPAA. Most vendors can describe their controls. Fewer can show evidence. Incline Protocol closes that gap, starting with where you stand today.
Who I am
I’m a hands-on operator, co-founder, GRC executive not a career consultant. I’ve led two full SOC 2 audit cycles, Type 1 and Type 2, as an executive at a healthcare SaaS company, and built the AI governance work that followed. I am IAPP AIGP credentialed, and I write Confidence Layer, a LinkedIn newsletter on SOC 2, governance, and AI governance.
Who I work with
- Healthcare startups preparing for their first enterprise deal.You need SOC 2 and an AI governance story before a health system’s security review stalls the contract. I help you build both once, in a form you can show.
- Established healthcare SaaS companies with audits in place and AI moving faster than your controls. I help you extend what already works to cover AI systems, so your evidence keeps up with your product.
- Both are selling to large healthcare organizations. Health systems and payers now review AI alongside security and privacy, and their questions keep getting sharper. I’ve answered those reviews from the vendor side. My work is getting you ready before the questionnaire arrives.
How we would start
Most engagements begin with a SOC 2 + AI Readiness Assessment: a fixed-scope review of your current controls, your AI systems, and the gaps a health-system security review will find. You leave with a scored risk register and a prioritized roadmap.
Clients who want ongoing support continue with a Fractional Trust Officer retainer: a senior owner for security questionnaires, audit cycles, and AI governance, without a full-time hire.
Why “Incline Protocol”
Trust is built uphill: deliberately, with evidence, one control at a time. The name is a reminder that the work is a protocol, not a pitch.
