Elation Health

This is the reference case for a C on this axis, and the grade is descriptive rather than critical. The product a practice buys is an electronic health record and billing platform; the AI products (Note Assist, Actions, Clinical Insights, Smart Coding) are genuine and shipping, but they are a layer on a system whose value stands substantially without them. A practice would not purchase Elation for the AI alone. That is precisely the information a buyer needs when weighing bundled incumbent AI against a specialist scribe priced separately.

Oversight is described concretely per product. Actions is stated to automate execution without taking control, drafting rather than sending, and Smart Coding shifts the biller's task to confirming a suggestion rather than building a claim. The AI Fast Lane is the exception worth scrutiny: claims above a defined confidence threshold bypass the manual review queue and submit automatically.

Held back from A because the confidence threshold, who sets it, and the error handling for auto submitted claims are not published, and an incorrectly coded auto submitted claim has compliance consequences.

No foundation model is named, no architecture is described, no evaluation method is published and no accuracy figure was located for note fidelity, order drafting or code suggestion.

The most consequential missing number is the confidence threshold governing the automated claim submission lane. Claims scoring above a defined threshold bypass manual review and submit without a human confirming them, so that threshold is the control the entire safety argument rests on. Its value is not published, nor is who sets it, nor what happens to a claim that is auto submitted and later found wrong.

That is the disclosure this index has repeatedly identified as the single most useful thing a coding vendor can publish. Nym Health publishes its threshold and the routing rule that follows from it; this vendor publishes neither, while operating a lane that submits without review.

Nothing identifies any party in the chain. No foundation model provider, model class or version is named, no architecture is described, no hosting arrangement is published for the capability, and no sub processor list was located in two passes. The commercial model widens what that silence covers.

The artificial intelligence capability is stated to be included at no additional cost with the subscription rather than sold as a separate product, so ambient capture is present across the customer base rather than confined to practices that chose to buy it.

Whatever the chain is, it therefore touches encounters from far more practices than an opt in scribe would, and many of those practices will not have run a procurement exercise on it at all because they did not buy it as a distinct thing. The unanswered questions compound in the same direction: no retention period for ambient audio or transcripts, no de identification posture, and no statement on whether customer content is used to train or improve the models. Ask for a sub processor list, a data flow covering the ambient path, and the training position in contract language rather than as a privacy assurance.

Evidence for the AI products is clinician testimonial and a vendor statement that adoption of its clinical AI has more than doubled. The 2026 Best in KLAS recognition is independent and buyer survey based but covers the EHR platform in the small practice category, not the AI products specifically. No accuracy, time savings, or coding integrity study was retrieved.

No retention period for ambient audio or transcripts, no statement on whether customer data is used to train or improve the models, and no de identification posture was located. The published assurance is that the documentation tool adheres to the privacy rule and that patient data is securely managed, which is a compliance statement rather than a stewardship one.

The scale question is specific to this vendor and follows from its commercial model. Native AI is stated to be included at no additional cost with the subscription, so ambient capture is not an opt in purchase made by a subset of practices but a capability present across the customer base. That makes retention and training use decisions apply to far more encounters than they would for a separately purchased scribe.

The most consequential unanswered question for an ambient product is what happens to the audio once the note is written. Establish whether recordings are discarded after processing, how long transcripts persist, and whether either is used to improve the models.

Elation publishes the full text of its business associate agreement at a public URL, which is the strongest route to an A on this axis and one only a handful of vendors in this index take. A practice can read what governs the relationship before entering a sales process rather than after.

The instrument is substantive. It is written against the privacy rule, the HITECH Act and the omnibus final rule, extends obligations expressly to subcontractors, names a responsible officer for notice, and contains a precedence clause stating the agreement controls where it conflicts with the underlying commercial contract. That last point matters more than it looks, because it prevents the protections being narrowed by terms elsewhere in the paperwork.

One item to verify directly rather than assume: third party sources report that HIPAA eligibility has at times been tied to particular subscription tiers. If that is current it is material to a small practice, so confirm that the agreement is available on the plan being purchased.

No SOC 2, HITRUST or ISO 27001 attestation published by the company was located across two differently phrased searches, and no trust centre or security page carrying an attestation was found.

Detailed descriptions of Elation's security controls do circulate, including encryption standards, access recertification and incident response practices. They appear on compliance vendor content marketing sites rather than on Elation's own materials, and this index does not credit third party listings for certification facts in either direction.

The gap is notable against what the company does publish elsewhere. A vendor willing to put its full business associate agreement at a public URL has already shown it will publish a legal instrument, which makes the absence of an attestation on the same site more likely to be a genuine gap than an oversight. Ask which report exists, its type and period, and which systems are in scope.

No FDA pathway applies to ambient documentation, coding suggestion or order drafting, and none is claimed.

Graded B because a real regulatory regime governs this vendor and it holds the credential. Elation describes itself as an ONC certified electronic health record, which brings ongoing surveillance, real world testing and the information blocking rules that attach to certified health IT, and certification status is publicly verifiable in a way most vendors in this index cannot match.

The question a buyer should press concerns the AI specifically. The decision support intervention criterion became part of the base electronic health record definition from 1 January 2025, and it reaches modules that enable or interface with a predictive intervention, not only those that supply one. A certified record shipping ambient documentation and coding suggestion sits inside that scope. Ask to see the source attributes for each AI feature and the summary of intervention risk management practices, both of which exist as conditions of that criterion rather than as courtesies.

Keep the credentials separate: ONC certification is functional and interoperability assurance, its decision support criterion is AI governance, and neither is an information security attestation.

No AI governance framework, model monitoring disclosure or bias evaluation published by the company was located.

There is a named artefact a buyer can ask for rather than a general question. As a certified electronic health record shipping predictive features, the decision support criterion requires source attributes covering development details, the process used to ensure fairness in development, external validation, quantitative performance measures and the schedule for continued fairness assessment, together with a summary of intervention risk management practices. Those are conditions of certification. Request them by name.

The substantive concern is coding rather than documentation. Smart Coding suggests diagnosis and procedure codes from the note and problem list, and a model that learns which codes are accepted is learning from payer behaviour rather than clinical accuracy. Nothing published addresses whether suggestion patterns are monitored for drift, or whether performance varies across patient populations whose documentation is thinner.

The finding here is not an absence of published commitments, though there is one of those too, but a described design that removes the human from the point where liability attaches. The platform operates a claim submission lane in which claims scoring above a confidence threshold bypass manual review and submit without a person confirming them.

A submitted claim is a representation to a payer, and where it is wrong the consequences fall under federal false claims enforcement on the organisation that submitted it, not on the vendor whose model scored it. So the single most important number on this record is the threshold, and it is not published.

Neither is who sets it, whether a customer can change it, what audit trail records that a given claim went automatically, or what happens to a claim that is auto submitted and later found to be wrong. This index has repeatedly identified the threshold and the routing rule as the most useful disclosure a coding vendor can make, and at least one peer publishes both while operating a comparable lane.

Publishing neither, while running a lane that submits without review, is the weakest position on this axis in that category. Nothing else offsets it. No accuracy figure for note fidelity, order drafting or code suggestion was located, and no warranty, indemnity or remediation commitment was found in two passes. Ask for the threshold value, who controls it, how automatically submitted claims are marked in the audit trail, and what the vendor commits to when one is wrong.

Structurally unbeatable on this axis, because the vendor is the EHR. Note Assist writes into the clinician's own note templates inside the chart, Actions drafts prescriptions, orders, and referrals directly, and Smart Coding reads the problem list, medications, and visit note to build the claim. There is no integration layer to fail. Buyers should note the converse: this depth exists only for practices already running Elation.

No hosting provider, region, tenancy model or data residency commitment was located, and no subprocessor list is published.

The product is cloud delivered by construction, since the electronic health record itself is a hosted platform for independent practices, so there is no on premise option to establish. What is missing is where it runs and what separates one practice's data from another's.

The subprocessor question is the one worth pressing here. An ambient scribe requires speech processing and a coding suggestion feature requires a language model, and neither is necessarily built in house. Establish which third parties process encounter audio and note content, whether any of them retain it, and whether that list is disclosed and kept current under the business associate agreement the company publishes.

The structure is inferable and one commercially decisive fact is published: the vendor states native AI is included at no additional cost with the EHR subscription. That is a material disclosure, since the competing purchase is a specialist scribe at a separate per clinician fee. Held back because the underlying EHR subscription price was not verified in retrieved materials, so total cost of ownership still requires a sales conversation.

Narrow and explicitly stated: independent primary care, with the platform recognized in 2026 Best in KLAS specifically in the 1 to 10 physician small practice category. The company does not claim enterprise health system or broad specialty coverage. Narrow scope clearly stated is what this axis rewards.