ARKA Vendor Portal
Everything a contracting team needs, one link. Documents marked "in preparation" have committed delivery dates — ask us and we'll put them in the MSA timeline.
Forward this page internally — no account required for public artifacts. Controlled documents require an executed NDA; template status is shown honestly until attorney-final versions are published.
Contracting
We work from your paper or ours; our templates exist to compress timelines, not to win terms.
Day 0
Phase 0 — Paperwork
AvailableVendor portal index, data-flow & PHI statement, and company brief for counsel — no account required for public artifacts.
Days 0–2
Mutual NDA
Under NDAExecuted NDA unlocks the full security & compliance package — controlled documents indexed on /security.
- Security & compliance package (27 docs)Under NDA
- Security & compliance package (27 docs)
Days 0–4
Business Associate Agreement (ARKA-LGL-001)
On executionARKA pre-signature workflow — template view on request (no public draft download). ARKA countersigns within 2 business days of your execution.
- BAA template (ARKA-LGL-001)On execution
- BAA template (ARKA-LGL-001)
Targets: attorney-final Day 21–28 (TG-10)
MSA + DPA + cybersecurity addendum
In preparationARKA-LGL-002 through -004 from attorney-maintained templates or your paper — cyber addendum HSCC MC2 v2-aligned (Nov 2025 baseline). Index: docs/legal/CONTRACT_PACKAGE_INDEX.md.
- MSA templateIn preparation
- Data Processing AddendumIn preparation
- Cybersecurity addendum (HSCC MC2 v2-aligned, Nov 2025)In preparation
- MSA template
Parallel with legal review
Security questionnaire
AvailablePre-seeded answer bank (docs/security/QUESTIONNAIRE_SEED.md); Security questionnaire responses: pre-seeded bank available now; licensed SIG Lite [2026] response available [on membership — TG]; we complete customer-supplied questionnaires in ≤5 business days.
- SIG Lite / CAIQ security questionnaire responseAvailable
- Penetration test statusIn preparation
- SIG Lite / CAIQ security questionnaire response
Target: 2–4 weeks from NDA
Executed agreements
AvailableFully executed MSA, BAA, DPA, and cyber addendum — sandbox provisioning and Phase 1 integration follow signature.
Template status is published honestly — no public download until attorney-final. Controlled index: docs/legal/CONTRACT_PACKAGE_INDEX.md
Legal & contracting
VAC submission packet
AvailablePrint-ready Value Analysis Committee packet — single source of truth for committee review.
Company & financial stability brief
AvailablePrint-ready stability brief — TG-5 gated facts stated plainly; full page at /company.
Security & compliance package (27 docs)
Under NDAExecuted NDA → full document set; index public on /security (27 controlled documents).
BAA template (ARKA-LGL-001)
On executionTemplate view available on request (no public draft download). ARKA pre-signature workflow: countersigned within 2 business days.
MSA template
In preparation[attorney-final ETA — TG-10]
Data Processing Addendum
In preparation[attorney-final ETA — TG-10]
Cybersecurity addendum (HSCC MC2 v2-aligned, Nov 2025)
In preparation[attorney-final ETA — TG-10]
Acceptable Use Policy
In preparation[attorney-final ETA — TG-10]
Insurance certificates (E&O / cyber)
On request[TG-5 carrier/limits]
Subprocessor list
AvailablePublic PHI-relevant subprocessor register — Vercel, Supabase, optional Render ML; 30-day change notification aligned to BAA flow-down.
AI Governance Submission Package
AvailableRUAIH-mapped print packet — seven elements with HTI-1, NIST AI RMF, and FDA/CMS crosswalks.
CMS-0057-F matrix
AvailableRequirement-by-requirement capability mapping with honest status chips.
Hospital-side CMS-0057-F brief
AvailableProvider-side impact brief — PI attestation, payer clocks, Da Vinci readiness.
W-9 / banking / vendor-setup forms
On requestAvailable on request during vendor onboarding.
Security & privacy
Security & compliance package (27 docs)
Under NDAExecuted NDA → full document set; index public on /security (27 controlled documents).
BAA template (ARKA-LGL-001)
On executionTemplate view available on request (no public draft download). ARKA pre-signature workflow: countersigned within 2 business days.
Data Processing Addendum
In preparation[attorney-final ETA — TG-10]
Cybersecurity addendum (HSCC MC2 v2-aligned, Nov 2025)
In preparation[attorney-final ETA — TG-10]
SIG Lite / CAIQ security questionnaire response
AvailableSecurity questionnaire responses: pre-seeded bank available now; licensed SIG Lite [2026] response available [on membership — TG]; we complete customer-supplied questionnaires in ≤5 business days. Seed: docs/security/QUESTIONNAIRE_SEED.md.
Penetration test status
In preparationPenetration test: first independent test scheduled Q4 2026; engagement letter shareable under NDA; executive summary shared with customers post-remediation.
Subprocessor list
AvailablePublic PHI-relevant subprocessor register — Vercel, Supabase, optional Render ML; 30-day change notification aligned to BAA flow-down.
Data-flow & PHI statement
AvailableAI Governance Submission Package
AvailableRUAIH-mapped print packet — seven elements with HTI-1, NIST AI RMF, and FDA/CMS crosswalks.
Clinical & quality
VAC submission packet
AvailablePrint-ready Value Analysis Committee packet — single source of truth for committee review.
QBR agenda template
Available60-minute Quarterly Business Review agenda — measured-vs-modeled variance, KPI deep-dive, change-control, fairness/drift, expansion pipeline, actions-with-owners (docs/customer-success/QBR_AGENDA_TEMPLATE.md).
Data-flow & PHI statement
AvailableAI Governance Submission Package
AvailableRUAIH-mapped print packet — seven elements with HTI-1, NIST AI RMF, and FDA/CMS crosswalks.
CMS-0057-F matrix
AvailableRequirement-by-requirement capability mapping with honest status chips.
Hospital-side CMS-0057-F brief
AvailableProvider-side impact brief — PI attestation, payer clocks, Da Vinci readiness.
Finance & vendor setup
VAC submission packet
AvailablePrint-ready Value Analysis Committee packet — single source of truth for committee review.
QBR agenda template
Available60-minute Quarterly Business Review agenda — measured-vs-modeled variance, KPI deep-dive, change-control, fairness/drift, expansion pipeline, actions-with-owners (docs/customer-success/QBR_AGENDA_TEMPLATE.md).
Budget pathways
AvailableThree documented ways to fund an ARKA pilot without a capital request — departmental opex, compliance alignment, phased funding.
Company & financial stability brief
AvailablePrint-ready stability brief — TG-5 gated facts stated plainly; full page at /company.
MSA template
In preparation[attorney-final ETA — TG-10]
Insurance certificates (E&O / cyber)
On request[TG-5 carrier/limits]
CMS-0057-F matrix
AvailableRequirement-by-requirement capability mapping with honest status chips.
Hospital-side CMS-0057-F brief
AvailableProvider-side impact brief — PI attestation, payer clocks, Da Vinci readiness.
W-9 / banking / vendor-setup forms
On requestAvailable on request during vendor onboarding.
IT & integration
Security & compliance package (27 docs)
Under NDAExecuted NDA → full document set; index public on /security (27 controlled documents).
Cybersecurity addendum (HSCC MC2 v2-aligned, Nov 2025)
In preparation[attorney-final ETA — TG-10]
Acceptable Use Policy
In preparation[attorney-final ETA — TG-10]
SIG Lite / CAIQ security questionnaire response
AvailableSecurity questionnaire responses: pre-seeded bank available now; licensed SIG Lite [2026] response available [on membership — TG]; we complete customer-supplied questionnaires in ≤5 business days. Seed: docs/security/QUESTIONNAIRE_SEED.md.
Penetration test status
In preparationPenetration test: first independent test scheduled Q4 2026; engagement letter shareable under NDA; executive summary shared with customers post-remediation.
Data-flow & PHI statement
Available
Need something not listed? Email security@getarka.health — typical turnaround is 2 business days for questionnaire seeds and controlled packages.