Ask a DON where their compliance program lives and the honest answer is usually "a binder, a shared drive, and my memory." Software vendors compete on charting and billing; the administrative-compliance work — the part a state surveyor or an OIG inquiry actually asks to see — is left to spreadsheets. We built the piece nobody markets.
One hub, framed by the seven elements
The OIG's Compliance Program Guidance defines seven elements of an effective compliance program. Carelytic's Compliance hub is organized around them, with a calendar that puts every recurring obligation — policies, screening, drills, QAPI, reassessments — in one place, and an overview tab that shows the survey-readiness snapshot at a glance: open incidents, open corrective actions, HIPAA risk-assessment status, expiring credentials, pending policy acknowledgments.
What's in it
- Occurrences on one engine — complaints & grievances, and abuse/neglect reporting with Minnesota's 24-hour Maltreatment of Vulnerable Adults clock started automatically and tracked to the MAARC common entry point.
- Emergency preparedness + drills — plans and an exercise log for the CMS Emergency Preparedness rule.
- Monthly OIG/SAM exclusion screening — automated checks of every employee against the OIG LEIE and SAM.gov, because an excluded provider on the roster is a False Claims Act exposure.
- Infection surveillance with outbreak detection, corrective action plans, and QAPI / performance improvement projects kept as living records.
- Mock survey self-assessment whose findings roll straight into corrective action plans.
- HIPAA Security Risk Assessment + breach register, a vendor BAA register, and PEPPER / CASPER review tracking.
- Chart readiness and directional quality measures for home health.
- A policy library with attestation — assign, notify, capture the signature, and re-acknowledge automatically on revision — plus compliance packs that send a whole state × license-type ruleset to an agency at once.
- Staff training — in-service courses with auto-graded quizzes and certificates, assigned by role, recurring annually, feeding the §484.80 in-service hours.
Home health and assisted living, same roof
The hub is care-setting aware. Home health sees OASIS, chart readiness, and quality measures; assisted living sees resident reassessments and its Minnesota 144G obligations. Underneath it all is the security model Carelytic has always shipped — RBAC enforced before PHI loads, an audit trail on every action, and mandatory 2FA. See the compliance & survey-readiness suite.