When a facility chooses an IT support provider, attention usually goes to price and the sales conversation. The contract, which determines what you actually receive when something breaks at 3 a.m., often gets a quick skim. That is a mistake. A support agreement defines who responds, how fast, what is covered and what happens if the relationship ends.
Here is a practical guide to the sections that matter most, written for administrators, not lawyers. Have your own counsel review any agreement before signing.
Look for a clear list of services. Ambiguity here causes most disputes later.
Which systems and locations are covered: workstations, servers, network gear, phones, medical devices, cloud services?
Is it unlimited support or capped hours?
Are on-site visits included, or billed separately?
What counts as a project, such as an office move, new EHR rollout or Wi-Fi upgrade, and how is it priced?
Are security services included, or sold separately: endpoint protection, email filtering, backups, training?
Who handles vendor coordination with your EHR, phone and internet providers?
A response time is how fast someone acknowledges your ticket. A resolution time is how fast the problem is fixed. Many agreements promise only response. Ask for:
Priority definitions that match your operations, with critical issues such as EHR outages ranked at the top.
Response targets for each priority.
After-hours, weekend and holiday coverage. Care facilities do not close.
How the provider reports on performance, and what remedy exists if targets are missed.
Who monitors security alerts, and when?
What is the process in a suspected breach, and who pays for the investigation?
Does the provider carry cyber liability and professional liability insurance? Ask for proof and limits.
Does the provider follow security practices for its own staff, such as MFA and background checks?
Who holds administrative credentials, and are they documented and accessible to you?
A managed IT provider with access to systems containing ePHI is a business associate. A signed BAA is required. Review its breach notification terms, subcontractor rules and what happens to your data on termination.
This is a frequent trouble spot. Confirm in writing:
You own your data, licenses, domain names and accounts, and administrator credentials can be handed over on request.
Documentation, such as network diagrams and password vaults, belongs to you.
Software and subscriptions are purchased in your organization's name, not the provider's.
Is pricing per user, per device or flat? What triggers an increase?
Are there annual escalators?
What is not covered by the monthly fee: hardware, licenses, travel, after-hours work?
How are added staff, devices or buildings priced?
Contract length and automatic renewal. Calendar the notice deadline.
Termination for convenience, and for cause if service levels are missed.
Transition assistance: will the provider cooperate in handing over to a new one, and at what cost?
Return of data and credentials within a defined time.
Many agreements limit the provider's liability to a few months of fees. That may be reasonable, but understand it. Read the exclusions closely, for example for problems caused by unsupported systems or by actions of third parties.
Who will actually answer my calls, and where are they located?
Who is my named contact, and what happens when that person is out?
Can I speak with a reference customer in healthcare or senior living?
How do you handle a facility-wide outage at night?
What do you do in the first 90 days of onboarding?
Refusal to sign a BAA.
Vague, undefined response times.
The provider owns the licenses or accounts.
No after-hours plan.
Pressure to sign quickly.
Read the agreement as if something has gone wrong, because that is when you will need it. Then ask for the answers you need in writing.
UnityCare IT is happy to review an existing support agreement from any provider and explain what it does and does not cover, whether or not you ever work with us.
Call or text: 405-285-3845
New customers: start@unitycareit.com
Existing customers: support@unitycareit.com
Address: 2524 N Broadway Ste 554 PMB 947974, Edmond, Oklahoma 73034