Dental offices have two federal rules to meet. Most have nobody on staff to do it.
Intake Compliance produces the two documents with software and a human review, and reaches practices through the advisors they already trust
September 8, 2026 — Intake Compliance is onboarding a first group of partners: dental consultants, accountants, website and IT firms that already serve practices. Partners refer or resell a self-serve kit that produces a HIPAA security risk analysis, a website accessibility report, and intake forms that work with assistive technology. Partners keep 30 percent of every sale.
The timing is set by two federal rules. The HIPAA Security Rule already requires a risk analysis, and a missing one is the finding HHS inspectors write up most. The HHS Section 504 rule now requires practices with 15 or more employees that take Medicaid to meet WCAG 2.1 AA on their website, patient portal and intake forms by May 11, 2027, extended in May 2026 from the original date; smaller practices follow on May 10, 2028.
We scanned 60 dental and medical practice websites this month. 55 fail WCAG 2.1 AA on the home page, usually for one fixable reason, and half of the intake PDFs we checked cannot be read by a screen reader.
The two rules, in plain English
Keep patient information safe. The law is called HIPAA. Once a year, every practice must write down where patient data could leak and what it is doing about it. That document is a risk analysis. When federal inspectors show up, “no risk analysis on file” is the finding they write up most.
Make the website work for everyone. The rule is called Section 504. Practices that take Medicaid must make their website, patient portal and online forms usable by people with disabilities: text dark enough for low vision, forms a screen reader can fill in. Almost none pass today.
Why it stays unfixed. A dentist with twenty employees has no compliance officer. A consultant charges thousands and takes weeks. The free government template gets abandoned half-finished. So most offices simply hope nobody checks.
What a practice gets for its money
The simplest way to think about it: TurboTax for these two rules. The software asks the questions and produces the documents. A human expert checks the result before it goes out. The practice ends up with paperwork it can hand to an inspector, instead of a vague worry.
-
A finished risk analysis
Filled in step by step, then reviewed by a credentialed compliance professional before it goes out, so it holds up if an inspector reads it.
-
A website accessibility report
A plain list of what fails on the site and portal, what to fix, and in what order. Written for the office manager, not a programmer.
-
Intake forms that work for everyone
The PDFs patients fill out before an appointment, rebuilt so people using assistive technology can complete them.
How partners work with us
Reaching offices one at a time is slow and expensive. One partner with 300 clients is worth 300 cold calls, and dentists listen to them. No sales team, no quotas, no exclusivity required.
-
Find a partner
A dental consultant, accountant, website or IT firm that already serves dozens to hundreds of practices.
-
Show them the gap
Our scanner checks their clients’ websites for free and shows exactly what fails, in plain language.
-
They bring the answer
Their clients were going to ask about this anyway. Now the partner has something to hand them.
-
The partner keeps 30 percent
Every sale pays the person who made the introduction: $450 on each kit, and 30 percent of the monthly plan for as long as the practice stays.
Pricing
| Item | Price | Terms |
|---|---|---|
| The kit, once per practice location | $1,499 | One-time |
| Ongoing: yearly refresh, quarterly rescans | $79 / month | Optional, cancelable |
| Partner’s share of each sale | 30% | Kit and monthly plan |
Why now
Deadline: May 11, 2027. That is when the website rule becomes the precise yardstick inspectors measure against, for practices with 15 or more employees that take Medicaid. HHS extended it once, in May 2026. Nobody is betting on a second extension.
The HIPAA risk analysis is already due every year. HHS runs a HIPAA audit program under the HITECH Act, and its Office for Civil Rights has announced fourteen enforcement actions under its Risk Analysis Initiative as of June 2026, with settlements starting near $100,000.
Intake Compliance is built by Charlton Davis, a software engineer. He built the scanner that produced the figures on this page and is building the kit with the first group of partners. Partners who want the findings on their own clients’ sites before a call can ask and he will send them.
Ask for findings on your clients’ sites
Email thenewtechwiz@gmail.com with a few practice websites and you will get the scan results back, whether or not we talk.