NPI / state license / DEA / board cert / CAQH / UK GMC / other, with 90/60/30/7-day expiry windows + already-expired bucket. AI-generated reminder copy via the HIPAA-aware wrapper. Dedup log prevents double-fires.
Healthcare practices lose seats over expired credentials. The fix is boring and load-bearing: a daily 04:00 UTC cron sweeps every credential, fires reminders into the 90/60/30/7-day expiry windows plus an already-expired bucket, dedups via a CredentialReminderLog row keyed on (credential, window) so a credential expiring tomorrow doesn't blast the inbox at every window pass.
The reminder copy is AI-generated through the HIPAA-aware wrapper, so the language is contextual ("your DEA expires in 30 days" reads differently from "your NPI lapsed last week") without exposing PHI. Falls back to a hand-written template if the Anthropic key is unset. CONTRACT-tier audit row on every fire.
next step
Bring me a real operations problem. I'll show you the system before you sign anything.
The Ops Leak Audit is the fixed-price first step: I count the hours your tools cost your team and price the fix. Rather talk first? A 30-minute call works too, and if we're not a fit, you walk with notes you can use anyway.