AHG Compliance Decision Support

Before you move forward

Find out if Compliance review is needed.

Answer a short set of questions about your activity, project, vendor, tool, campaign, data use, or operational change. You will receive an immediate decision and a summary you can save.

Key Disclaimers

Do not enter detailed PHI. Use short descriptions only. If you are unsure whether PHI, AHG systems, regulated activity, or sensitive data is involved, the tool will route you to Compliance.

Scope disclaimer. This tool is for general AHG Compliance screening only. It is not intended to determine FDA, Pharmacy, or Southend Pharmacy-specific compliance requirements. If your activity may involve FDA-regulated matters, pharmacy operations, compounding, dispensing, prescription workflows, or Southend Pharmacy, Contact Marwa/Southend Pharmacy Compliance.

Step 1 of 5

Your Information

Tell Compliance enough to understand the business activity without including patient names, medical details, credentials, secrets, or contract-sensitive language. A short plain-English summary is best.

Good activity title New vendor for contract review, AI note-taking tool, marketing email campaign.

Do not paste PHI Use "patient data may be involved" instead of names, diagnoses, prescriptions, or chart details.

Description formula What is changing + who is involved + whether a tool, vendor, data, or campaign is involved.

Name AHG email Department or business unit Activity title

Brief activity description

What are you planning?

Pick every option that could describe the activity. If more than one is true, select more than one. The goal is not to classify it perfectly; the goal is to catch anything Compliance may need to see.

Vendor or contract? Choose vendor/contract if an outside company, consultant, contractor, platform, or agreement is involved.

Tool or system? Choose software/IT tool if employees will use a new app, website, SaaS product, integration, or automation.

Pharmacy/FDA/Southend? Choose the out-of-scope option. This tool will redirect you to Marwa/Southend Pharmacy Compliance.

Select all that could apply. When unsure, choose "Other or not sure."

Data, Systems, and Vendors

This page is about access and information. Select an option if a vendor, tool, employee, integration, file export, report, or support account could touch AHG systems or data.

System access includes Login accounts, shared drives, admin portals, APIs, SSO, support access, file transfers, or reports.

Data includes Files, lists, exports, screenshots, dashboards, analytics, tickets, messages, or records.

Use "None" only when No AHG system access, no AHG data, no vendor data handling, and no sensitive information are involved.

Select every data, access, or vendor condition that could be true.

Marketing, Data Use, and Communication Risk

This page checks whether the activity may create marketing, privacy, security, contract, or communication obligations. Select an option even if the campaign, vendor, or data use is still in the planning stage.

Claims or outreach? Pick marketing if the activity includes public claims, testimonials, before/after content, email, SMS, pixels, or targeting.

Sensitive people data? Pick high-risk data for minors, employee health, provider credentials, or other sensitive identifiers.

Not sure? Choose "I do not know." Unknown details should go to Compliance instead of guessing.

Select all that could apply. If none apply, choose "None of the above."

Compliance Decision Support

Find out if Compliance review is needed.

Key Disclaimers

Your Information

What are you planning?

Data, Systems, and Vendors

Marketing, Data Use, and Communication Risk

Review Your Answers

Why

Next Steps

Controls Needed