🎯 The business: you pick one industry that lives under a rule, such as dental offices and HIPAA, small CPA firms and tax-return privacy, or town clerks and accessibility deadlines, and you run one painful job for its offices every week. AI does the reading and drafting. You check every item against the source, a licensed professional makes the decisions, and the paperwork the rule requires is built into how you work. The rule is what keeps owners from doing it themselves, and it is a large part of what they pay you for.
This plan is narrower than An AI automation studio and usually pays better per hour once it is running, because you know one industry’s work and rules better than any generalist. It also asks more of you on day one: training, insurance and contracts come before the first client file.
Who this suits, and who it doesn’t
It suits someone who has worked in or near the industry: a former dental front-desk coordinator, a bookkeeper who has lived through tax season, a paralegal, a deputy clerk, an insurance customer-service rep. You already know the words, the software and the bad days. That knowledge is worth more than any AI skill, and it is why owners will trust you.
It does not suit someone who finds rules tedious, or who wants to work on many different kinds of problems. The job is the same task done carefully, hundreds of times, with a written record. It is also not a part-time college job; most of these desks need a steady weekday presence and client data a student should not be holding.
Pick one industry, and let the rule shape the work
Each row below is an idea page in this section. The "you never" column is the licensing line. Crossing it is how a helpful desk becomes unauthorized practice, or a privacy violation.
| Industry desk | The rule | You do | You never |
| Dental insurance verification | HIPAA: a business associate agreement (BAA) with each practice and with every tool that sees patient data | Check benefits before visits, enter the breakdown, flag gaps | Put patient data in a consumer chat account; make clinical calls |
| Prior-authorization packets | HIPAA, plus federal decision clocks for affected payers from 2026: 72 hours urgent, 7 days standard (CMS-0057-F) | Assemble the packet against the payer’s criteria | Make clinical judgments; a clinician reviews |
| Tax-season documents for CPA firms | IRC 7216: strict limits on disclosing or using tax-return information, with written-consent rules; $250 per disclosure, up to $10,000 a year (IRC 6713) | Chase, sort, rename and check client documents | Prepare returns or give tax advice |
| Minutes and accessible documents for towns | ADA Title II web rule: WCAG 2.1 AA by April 26, 2027 (50,000+ people) or April 26, 2028 (smaller places and special districts); state open-meetings laws | Draft minutes, captions and accessible PDFs | Approve minutes; the clerk and board do |
| Insurance agency service desk | State producer licensing | Intake, certificates, renewal reminders, approved answers | Quote, bind or explain coverage |
| Law firm intake | Unauthorized practice of law; lawyers must supervise non-lawyer help (ABA Formal Opinion 512, 2024) | Collect facts, run the conflict list, book consults | Judge the case, give legal advice, quote fees |
| AI hiring-tool notices | NYC Local Law 144; Illinois HB 3773 (from January 1, 2026); Colorado SB 26-189 (from January 1, 2027) | Inventory screening tools, set up notices | Perform the bias audit (an independent auditor does) or give legal advice |
| Translation review for clinics | ACA Section 1557: a qualified human reviews machine translation of critical documents | Review and format translations | Fill in or advise on immigration forms |
Choose with three questions. Do you already know this industry’s work? Is there a deadline or a rule that makes owners act now? And can you reach 30 of these offices within an hour’s drive or through one association? If one industry gets three yeses, stop looking.
How compliance becomes the product. Software vendors sell these industries a portal and leave the rest to the office. You sell the finished job, with the rule built in: the signed BAA before any patient data moves, the 7216 consent step the CPA firm decides it needs before return data reaches any outside tool, the accessibility check before a PDF is posted, the script that hands every coverage question to a licensed agent. Put those steps in writing, show them to the owner, and keep a log. That record is what a careful owner is buying, and it is what a general AI vendor rarely offers.
HIPAA in plain words, because most readers start with a health desk. If you handle protected health information for a practice, you are its business associate. You need a signed BAA with every practice, and a BAA with every AI or cloud tool that sees that data. Encrypting the data does not remove the need for one. Consumer ChatGPT or Claude accounts do not come with a BAA, and Medical Economics reported in July 2026 that pasting patient information into a consumer chatbot without one is an impermissible disclosure. Use only business or API plans from vendors that will sign, and check each vendor’s current terms. Have a healthcare lawyer review your BAA and service agreement once; it is the best few hundred dollars you will spend.
The offer ladder
The rest of this plan uses the dental verification desk as the worked example, because it has the clearest pricing. The ladder is the same shape for every industry.
Paid trial, $150 to $300. For one week, you verify the next day’s patients and hand over a clean list of benefits and problems by mid-afternoon. A BAA is signed before the trial, not after.
Desk plan, $300 to $800 a month per location. Every scheduled patient checked ahead of the visit, breakdowns entered into the practice software, and a named person the office can call. For reference, one outsourcing vendor’s published tiers run $250 to $825 a month per location by volume, outsourced checks are priced at about $1 to $8 each on vendor price pages, and competitors’ marketing puts an in-house coordinator at $2,000 or more a month.
Next office. Office managers talk to each other. A referral from a happy practice is your best lead, and the second location of a group practice is often the easiest sale you will make.
Second desk. Once one desk runs smoothly, add the neighbor task, such as prior-authorization packets for specialists, or hire someone to run the first desk while you start another industry.
What it costs to start
| LLC and city or county license | $150 to $500 |
| HIPAA training course (an estimate) | $0 to $200 |
| Cyber liability and errors and omissions insurance, first payment (an estimate; get quotes) | $500 to $1,500 |
| Lawyer review of your BAA and service agreement (an estimate) | $300 to $1,000 |
| AI and document tools on plans whose vendors sign a BAA, first three months (an estimate; check each vendor) | $0 to $300 |
| Secure laptop setup: encryption, password manager, security key | $50 to $200 |
| All-in | ≈ $1,000 to $3,700 |
For a tax-season or town desk, swap the HIPAA lines for the industry’s own requirements, such as a 7216 consent template reviewed by a lawyer, or an accessibility checker. See Business insurance and Choosing a legal structure.
The first 90 days
Days 1 to 25: choose and listen. Pick the industry, read its rule in the original wording, and talk to ten owners or office managers. Ask what job they hate, what they have tried, and what they would pay to have it gone. Write down their words.
Days 10 to 50: get ready. Take the training, buy insurance, and have your agreement and BAA (or consent form) reviewed. Build your workflow on test data: the checklist, the checking step, the log and the handoff. Time yourself so you know what a location really takes.
Days 30 to 80: sell. Reach 30 offices and three or four partners (below). Run paid trials from about day 45.
Days 60 to 90: deliver. Convert trials into monthly desks. On day 90, a good position is six or more conversations, two or more paid trials and at least one monthly desk.
Pricing and a worked month
| Paid one-week trial | $150 to $300 (example) |
| Dental verification desk | $300 to $800 a month per location (example, inside vendors’ published tiers) |
| Overflow checks | $1 to $8 per check (vendor price pages) |
| Tax-season document desk | $1,500 to $5,000 a season, or $5 to $15 per return (estimate) |
| Town minutes and captions | $100 to $300 per meeting (estimate) |
| Insurance agency service desk | $300 to $1,000 a month (estimate) |
| Law firm intake setup | $500 to $2,000, plus $200 to $500 a month (estimate) |
Price by the location or the season, not the hour. Owners compare you with a staff member or a software subscription, and a flat monthly fee is easy to set beside either. Raise prices for new clients once you have a waiting list. More in Pricing AI and IT services.
A worked month. Here is an example month for a dental desk with four locations. Three are on a $600 plan, which brings $1,800. One smaller practice pays $450. One new practice runs a $200 paid trial. That is $2,450.
Costs: $80 for AI and document tools on BAA-covered plans, $30 for a phone and secure fax line, $110 set aside for insurance and $30 for marketing, $250 in all. That leaves about $2,200 before tax.
A desk grows one location at a time, and locations rarely leave if the work is accurate. The weak point is concentration: if one group practice is half your income, its decision to bring the work in-house is your bad year. Aim for no single client above a third of revenue. Taxes: see Small business taxes.
The first ten clients
Who first. Your own dentist, CPA or agent, and any office you have worked in or with. Then the people who already serve the industry and hear its complaints: for dental, supply reps, practice-management consultants, billing companies and the IT providers who look after dental offices.
The plan, with numbers. List 30 practices within 30 minutes of you. Over about seven weeks: email all 30, drop a one-page sheet at 15 of them in person in the mid-afternoon (never during the morning rush), call 10 to follow up, and meet three partners. Join or attend the local dental society or the industry’s own association meetings where vendors are welcome. Expect 6 to 8 real conversations, 2 to 4 paid trials and 1 to 3 monthly desks by day 90.
Hi Tanya, I run a small insurance verification desk for dental offices in the North County area. For each location I check every scheduled patient’s benefits the afternoon before, enter the breakdown into your practice software, and flag anything that needs a conversation at the front desk. I sign a business associate agreement before I see any patient information, and I only use tools whose vendors sign one too. Would a one-week paid trial be useful, so you can see the work before deciding anything? I’m happy to stop by after your morning rush. Thanks, Renee Alvarez, 555-0173
Channels, best first, for an industry desk:
| People who already know your industry work | Former coworkers and employers trust you with their data |
| Industry vendors and consultants | Supply reps, billing firms, practice consultants, software resellers |
| The industry’s local association or study group | One talk reaches a room of exact buyers |
| In-person visits with a one-page sheet | Office managers buy from people they have met |
| LinkedIn, aimed at office managers in one industry | Good for law, accounting and insurance desks |
| Google Business Profile and a one-page site | Lets referrals check you; show the BAA and process, not hype |
| Marketplaces | Poor fit; regulated data rarely goes to strangers online |
| Paid ads | Last, if ever |
Turn clients into proof. After a month, show the office manager what changed in their own numbers: patients checked, problems caught before the visit, front-desk hours freed. Ask permission to describe the result without names, and ask whom they know at other practices. Never share any patient detail in a case study. More scripts are in Launch and marketing playbook.
Systems, tools and help
The compliance file. For each client: the signed agreement and BAA (or consent forms), the list of tools that touch their data with each vendor’s BAA or terms, who on your side has access, and a dated log of work and any problems. Re-check vendors’ terms every quarter. Keep a written plan for what you do if data goes to the wrong place, including how fast you tell the client; your BAA will set the deadline.
Daily routine. Work inside the client’s own systems and portals with a login in your name, not a shared one. Use only the minimum information the task needs. Keep patient or client data out of email, texts and any consumer AI account. Check every AI-drafted item against the source before it goes into the client’s system, and record what you checked.
Tools. A business or API plan from an AI vendor that will sign a BAA, if your industry needs one; a password manager; an encrypted laptop; a secure fax or document-sharing service the practice approves. The tool list and data terms are in Your AI toolkit and what it costs, and the contract details (BAAs, 7216, liability) are in Contracts, client data and AI rules.
Getting help. The HHS Office for Civil Rights publishes HIPAA guidance for business associates. A healthcare or industry lawyer should review your templates once. SCORE mentors and Small Business Development Centers help with pricing and planning for free. The industry’s own association is often the best teacher of its rules. See Free help directory.
The first hire. Someone who has done the job inside an office, such as an experienced verification coordinator. Train them on the rule before they get access, have them sign a confidentiality agreement, give them their own logins, and add them to each client’s access list. Hire when you are turning down locations, not before.
Risks, and when to pivot
The main risks. A privacy incident is the big one; it can end the business, which is why the BAA, the tool list and the log come first. A wrong benefits breakdown can lead to a patient’s surprise bill, so record what the portal or insurer said and when. Software vendors keep bundling the same task (in dental, products such as Weave and NexHealth), so sell running the software, not replacing it. Rules change: HHS has proposed a HIPAA Security Rule update that is not final, a lawsuit challenges the Title II extension, and Colorado’s law takes effect in 2027. Seasonal desks, such as tax season, leave months empty unless you pair them with another desk.
When to change course (rules of thumb):
If offices say "we already bought software", offer to run that software for them. That is often the better business.
If owners don’t care about the rule, you may have the wrong buyer (try the office manager, not the owner) or the wrong industry.
If the core task gets cheap, move to the harder part: the exceptions, denials and follow-ups the tools leave behind.
If you find the rules more stressful than interesting, move to An AI automation studio and serve industries without regulated data. And if after six months no office has signed a monthly desk, take what you learned into a job inside the industry; experienced operators who understand AI tools are in demand.
Questions people ask
Do I need a BAA to do insurance verification for a dental office?
Yes. If you see or handle patient information for the practice, you are a HIPAA business associate and need a signed business associate agreement with the practice, and with any AI or cloud tool that sees that data.
How much do dental offices pay for insurance verification services?
Vendor price pages show about $1 to $8 per check depending on depth, and one vendor’s monthly tiers run $250 to $825 per location by volume. A local desk can price inside that range and win on speed and a named contact.
Can a non-lawyer run intake for a law firm?
Yes, if you only collect facts, check the firm’s conflict list and book consultations, under the lawyer’s supervision. You must not judge a case, give legal advice or quote fees; that is the unauthorized practice of law.
Checked in November 2026: HIPAA business associate rules as summarized by HHS guidance and trade press, CMS-0057-F decision clocks, IRC 7216 and 6713, the ADA Title II deadlines after the April 2026 interim rule, and dental verification prices from vendor pages. Not legal advice. Re-check the Title II challenge, the HIPAA Security Rule proposal and Colorado’s rules before relying on them.