Spec 00 · Contact desk · Northport, NY
Zephyrlatch
One phone line, one inbox, and a fixed price back within one business day. No chatbot, no calendar maze, no account executive.
Tell us what your practice runs on and roughly how many people log into it. You’ll get one number by email — what it covers, what it doesn’t — and you can ignore it without anyone chasing you. If we think you don’t need us yet, the email will say that instead.
- Phone
- (631) 275-9247Rings at the desk where reports get written. After 4:30pm, leave a voicemail — we call back the next business day.
- info@zephyrlatch.comOne inbox. Read by the same people who’d assess your office.
- 15 Sound Road, Northport, NY 11768For signed BAAs and paper checks. Meetings happen on video.
- Reply
- ≤ 1 business dayFriday at 4pm counts as Friday. Saturday counts as Monday.
Spec 01 · Routing table
Pick the door that matches the problem
Not every message should go to the same place. Some shouldn’t come to us at all, and we’d rather tell you that here than after you’ve waited a day for a reply.
| Row | If you… | Use | What happens next |
|---|---|---|---|
| R-A | Want a price for a risk assessment, phishing campaign or roadmap | The form below →Fastest for us to quote accurately | One email with one fixed price, within one business day. No discovery call unless you ask for one. |
| R-B | Have a cyber-insurance renewal questionnaire due soon | (631) 275-9247Calendar questions are faster by phone | We tell you on the call whether a full SRA can land before your date. If it can’t, we say so instead of rushing a report you’d regret signing. |
| R-C | Think you’ve been breached — ransomware note, locked files, a strange login | Your cyber insurer’s breach hotline first, then your ITThen us, once the fire’s out | We aren’t an incident-response firm, and pretending otherwise would cost you hours you don’t have. Afterward, we can help with the risk analysis OCR will ask about. |
| R-D | Got a letter from OCR asking for your risk analysis | (631) 275-9247And loop in your healthcare attorney | We can produce or update the SRA document. We can’t advise you on the legal response — that part is your attorney’s job, not ours. |
| R-E | Are a current client with a question about your roadmap | Reply to our last emailKeeps the history in one thread | An answer within one business day. Clarifying your own report is never billed — that’s part of what you paid for. |
| R-F | Sell software, leads, or a “partnership opportunity” | info@zephyrlatch.comShort, please | We read it. We probably won’t reply. We resell nothing, so there’s no commission for us to be tempted by. |
Security assessments, not legal advice. Nothing on this page creates a business-associate relationship — the BAA does that, and we sign it before we see a single login.
Spec 02 · Quote request
Four fields. One number back.
Here’s what each part of the form is actually for, so you’re not guessing how much to write.
NameWhoever would sign the BAA — usually the owner or office manager. That’s who the quote gets addressed to.
EmailWhere the price lands. A personal Gmail is fine; we’d rather reach you than wait for the front-desk inbox.
Service + staff countThese two set the price. Over 15 staff or more than one location, the number goes up — and we’ll show you exactly why.
MessageYour software, any deadline, and whatever’s been nagging you. Two sentences is plenty. No patient information, ever.
Spec 03 · The optional call
Fifteen minutes, then you can hang up
Rather talk than type? Fine. Here’s the whole call, minute by minute, so you know nobody’s going to “walk you through our platform.”
-
00:00
What you run on
Your practice software, imaging, email provider, and whether the server lives in a closet or in the cloud.
-
04:00
Who logs in
Staff count, locations, and the honest answer about who uses a personal phone to check the schedule.
-
09:00
What’s due
An insurer form, an OCR letter, a new hire’s nagging — or nothing at all, which is a perfectly good reason too.
-
13:00
A number, or a no
We name the fixed price on the call, or tell you the free HHS tool will do for now. Either way, it’s in writing by email after.
Weekdays 9:30am–4:30pm. If we’re on another practice’s readout, leave a message with a good time — that’s it, no phone tag script.
Spec 04 · Address, hours, ground rules
Where we sit, when we answer, and what to keep out of your email
Hours H-01
When someone’s at the desk
- Mon–Fri
- 9:30am–4:30pm
- Sat–Sun
- Closed
- Meetings
- Video only
- Coverage
- Anywhere in the US
Local and want coffee in Northport? Ask. It won’t change the price, and it won’t change the report.
Invoices payable by
Rule R-00 · Before you hit send
Three things we never want in our inbox
-
Patient names, birthdates, chart screenshots
Not to explain a problem, not “just this once.” Describe it in general terms and we’ll understand.
-
Passwords or login codes
We will never ask for them by email. If someone claiming to be us does, that’s a phish — forward it to info@zephyrlatch.com and we’ll thank you.
-
Exports from your EHR or imaging system
We assess how data is protected, not the data itself. A device list in a spreadsheet is all we’ll ever request.