Builder / printable

The questions to ask before you sign

A polished demo answers the questions a vendor wants you to ask. This builder gives you the rest. Choose the topics that matter for your purchase, and take a tailored, printed sheet into the meeting. Nothing here is stored.

Choose your topics

Data and interoperabilityWhether the system will share data or trap it.Security and privacyHow your patients' data is protected and who can reach it.Cost and contractThe true total cost, and how hard it is to leave.Support and reliabilityWhat happens when something breaks, and how often it does.Fit and usabilityWhether it suits how you actually work.Evidence and complianceWhether the claims stand up, and the rules are met.

15 questions selected

Questions for our health-tech vendor

Data and interoperability

1.Which interoperability standards do you support (for example HL7, FHIR), and for which data?
2.Do you provide a documented API, and is it included or charged separately?
3.Can we export all of our data, in a usable format, at any time and without a fee?
4.How does your system exchange data with labs, pharmacies or a hospital we work with?
5.What happens to integrations if you change your data format in a future version?

Security and privacy

6.Is data encrypted both in transit and at rest, and who holds the keys?
7.How is access controlled, and can we set roles so staff see only what they need?
8.Where is our data physically stored, and which laws govern it there?
9.What is your process and notification timeline if there is a data breach?
10.How do we obtain and record patient consent for data collected through your product?

Cost and contract

11.What is the total cost over three years, including setup, training, support and per-user fees?
12.Which features are included in the base price and which are paid add-ons?
13.What are the terms if we want to leave, and do you help us migrate our data out?
14.Do prices increase at renewal, and is there a cap on those increases?
15.Is training for our team included, and for how many people?

Method note: this is an original procurement prompt set. It does not certify a vendor, prove compliance, or replace clinical-safety, legal, security, accessibility, or financial review.

Frameworks behind the questions

Medical devices and digital tools NHS England, 2023Useful domains for due diligence, not a Mauritian certification scheme.
Cybersecurity Framework 2.0 US National Institute of Standards and Technology, 2024
Ethics and governance of artificial intelligence for health World Health Organization, 2021

Last reviewed: 2026-07-18

Do the groundwork first

The sharpest buyer knows their own starting point and speaks the language. Run the maturity check and keep the glossary open.

Digital-maturity self-check Health-tech glossary