Compliance Posture Intake
A structured Seven Elements assessment of your compliance program
Guides a structured compliance posture assessment covering all Seven Elements of an effective compliance program. Combines self-reported answers with analysis of any compliance documents you provide. Produces a posture snapshot with maturity stage, enterprise blocker flags, gap prioritization, and a 30/60/90 day roadmap.
From document to output
Describe your organization, HIPAA role, stage, customer type, and compliance goals in a brief conversational exchange
Walk through each of the Seven Elements of an effective compliance program: written standards, oversight, due care, training, monitoring, enforcement, and incident response
Optionally provide policies, BAAs, risk assessments, or training records for inline analysis against your self-reported answers
Receive a maturity stage (Foundation, Active Management, or Proactive Defense), a score percentage, and a list of enterprise blockers
A structured report with gap findings by element, document analysis results, state law considerations, and a 30/60/90 day action roadmap
What you get back
Every finding is structured JSON: status, evidence, risk level, and remediation in one package. No interpretation required before acting on it.
{
"maturity_stage": "Active Management",
"score_pct": 74,
"enterprise_blockers": [
"No formal risk assessment in past 12 months",
"Audit log review not documented"
],
"top_priority": "Complete HIPAA risk assessment and document log review procedures within 30 days"
} Three ways to run this skill
The first two are yours to run. The third is the platform, which runs as the instrument behind the practice rather than as a product sold here.
One-click install for Claude and Cowork users. The skill runs as a native tool in your Claude environment. No configuration, no MCP setup. Apache 2.0.
Get on ClawHub →Install as an MCP server in Claude Code, or download the SKILL.md and use it as a system prompt with any LLM. Runs the full methodology against documents you provide. Apache 2.0. No account required.
The platform runs this skill against a full document corpus in a workspace-isolated store: every finding is sourced to a specific document section, cross-referenced across the policy library, and carries a disposition and a reasoning trace. Not currently open for signups. It runs as the instrument behind the practice, and access is arranged inside an engagement.
How the practice runs it12 more skills in the methodology.
HIPAA Gap Analysis, BAA Review, Framework Mapping, Control Assessment, Risk Assessment, AI Claims Assessment, Part 2 Notice Assessment, Compliance Q&A, Document Finder, Legal Page Discovery, Skill Router, and AI Tooling Inventory. All open source under Apache 2.0.
Need this done rather than explained? Dan Gonzalez runs Dang's Solutions, the practice that delivers it.