- If independently verified security certifications (SOC 2 / ISO) are a gating requirement
- Public vendor materials reviewed do not document SOC 2 or ISO certifications; highly regulated procurement processes may require these disclosures.
- If procurement requires abundant third-party reviews specific to the product
- HealthEMS-specific reviews were not located on major review platforms in this review; reference checks and pilots will likely be required.
- If the agency can obtain an alternative ePCR via a state enterprise license at no cost
- In regions where competitors are available through statewide licensing programs at low or no direct cost, total cost of ownership and switching expenses should be carefully evaluated.
- If you require strong public evidence of reliability, data-loss prevention, and auditability without vendor demonstrations
- Community discussions raised data integrity and recoverability questions; risk-averse buyers should require explicit demonstrations, contractual SLAs, and references.
- Limited third-party review footprint for HealthEMS in the materials reviewed
- Major review platforms showed limited or non-specific coverage for the HealthEMS product; much of the public feedback available in this review related to adjacent vendor products.
- Security and compliance transparency gaps
- While a BAA is published, public evidence of SOC 2/ISO certifications and detailed enterprise security controls was not found in the materials reviewed.
- PHI de-identification clause in vendor terms
- The vendor's BAA includes language permitting aggregation and de-identification of PHI for product development. Some agencies may accept this practice; others may require tighter contractual constraints or opt-out provisions.
- Community-raised evaluation items (not confirmed defects)
- Forum discussions raised concerns about manual entry requirements, potential record loss, and safeguards against falsification. These items should be treated as evaluation checkpoints (audit trails, recoverability, and offline sync behavior) rather than as confirmed product defects based on the available materials.