Sentinel · prepared fictional example

Vendor exception export

EX-VN-001 · Riverside Primary Care · report date 1 September 2026. Scope: two unresolved vendor relationships only. This static example contains no client information and does not include the separate training export.

VN-005: laboratory relationship

Classification unresolved. Obtain the actual service description and PHI relationship. A treatment disclosure to another provider alone does not require a BAA. Other services may change that conclusion. Do not mark a BAA missing merely because this vendor is a laboratory.

VN-006: answering service

This fictional case assumes PHI handling on behalf of the practice. Action: agreement requested, still open. Evidence: signed BAA not held. Aisha Bennett owns the practice decision; the vendor supplies its response. Morgan Ellis coordinates follow-up. Requested 12 August; followed up 19 and 26 August; escalated 1 September. No signed agreement or closure is inferred from sending reminders.

Requirement class: law, conditional on business-associate status. Source: HHS Business Associates guidance, reviewed 14 September 2026. A contract does not universally expire each year; use its actual terms. Legal interpretation or disputed terms require qualified review.

Review and disclosure limits

Prepared by fictional reviewer Morgan Ellis for an internal demonstration. No recipient authorized and no external disclosure performed. This example does not validate signature authenticity, vendor controls, tenant isolation or a live export function.