Healthcare AI Governance, The SAFE Framework & Shadow AI - Chance Sassano

Ezekiel Iferia sitsdown with healthcare technologist, founder of AuthenTech AI, and creator of theSAFE Framework, Chance Sassano, to explore why traditional cybersecurityperimeters fail against generative AI, how hospitals are leaking protectedhealth information (PHI) through unchecked "Shadow AI," and howhealthcare leaders can govern AI deployments safely without stifling clinicalinnovation.

Chance explains whythe classic security mindset—relying on firewalls and network boundaries—isobsolete in an era where AI is already inside the hospital walls, on employeesmartphones, and quietly activated by software vendors. In this episode, hebreaks down the operational anatomy of the SAFE Framework (Systems,Acquisition, Frontline, Executive Oversight), explains why procurement mustfunction as a business-process firewall, details the risks of unvetted consumerLLMs lacking Business Associate Agreements (BAAs), and argues for thedeployment of Fractional Chief AI Officers (CAIOs) to protect healthcare boardsfrom emerging liability.

In this episode, you’lldiscover:

Connect with Chance Sassano& Explore AuthenTech AI:

Chapter Timestamps

00:00 Welcome ChanceSassano: Founder of AuthenTech AI & Creator of the SAFE Framework

01:25 The DissolvingAI Perimeter: "The Call Is Coming From Inside the House"

03:48 The Shadow AIEpidemic: How a 30-Minute Log Audit Discovered 45 Active AI Tools

05:52 The SAFEFramework Explained: Systems, Acquisition, Frontline & Executive Oversight

08:28 Procurement as aFirewall: Stopping Vendors from Silently Turning on AI

10:52 FrontlineEnablement: Why Healthcare Workers Turn to AI for Administrative Relief

12:35 ExecutiveOversight & Board Liability: The Role of the Chief AI Officer

13:48 Tailoring AIGovernance for Healthcare: HIPAA, Complex Systems & Tool Overload

15:57 Silent VendorFeature Rollouts: Contractual Vulnerabilities in Legacy SaaS

18:45 How to HandleClinicians Using ChatGPT: Moving from Punishment to Compliant Platforms

20:56 The Flaw inLegacy Security Pitches: Why Firewalls Miss Internal Model Integration

24:00 The Case for aFractional CAIO: Enterprise Governance Without Heavy Executive Overhead

25:53 Shadow IT vs.Shadow AI: Moving from Departmental Budgets to Individual Device Access

30:07 The FirstConcrete Step: Building an AI-Specific Acceptable Use Policy

31:46 Beyond theExtremes: The Practitioner’s Reality on Data Safety and HIPAA BAAs

34:08 Take the FreeSAFE AI Assessment at AuthenTech.ai/safe