As AI becomes part of everyday ambulatory care, organizations must move beyond evaluating technology to establishing governance, trust, and safety that protects patients, supports clinicians, and promotes responsible innovation.
Artificial intelligence is rapidly becoming integrated into administrative workflows, clinical documentation, patient communication, decision support, and numerous other aspects of ambulatory care. While these technologies offer significant opportunities to improve efficiency and care delivery, they also introduce new considerations related to governance, privacy, cybersecurity, accountability, and patient trust.
AAAHC will soon launch v45 Standards, which include AI Standards. They were developed with a straightforward objective: rather than attempting to regulate AI technology itself, they establish the organizational expectations necessary to use AI safely, responsibly, and transparently. As AI continues to evolve, organizations need governance frameworks that remain effective regardless of which technologies emerge next.
Responsible AI is ultimately not about adopting new technology—it is about using technology to improve quality, strengthen patient safety, and support better outcomes across the ambulatory care continuum.
AI Governance and Accountability
Many organizations initially approach AI as another software purchase. AAAHC views AI differently.
Every AI application that influences operations, patient communication, documentation, or clinical care creates organizational responsibilities that extend well beyond information technology. Governing bodies, executive leadership, clinicians, compliance, quality, risk management, and IT all have roles in evaluating, approving, monitoring, and overseeing AI use.
Ambulatory care organizations should ask:
- Who approves new AI applications?
- Who evaluates organizational risk?
- Who monitors ongoing performance?
- Who determines whether continued use remains appropriate?
The key question is not simply whether AI works—but whether the organization has the governance necessary to use it responsibly. Governance—not technology—is ultimately what protects patients.
AI Risk Assessment and Vendor Oversight
Responsible AI begins long before implementation. Organizations should first understand:
- What problem is the technology intended to solve?
- Does AI actually improve outcomes?
- What risks could it introduce?
- What safeguards are needed before deployment?
AAAHC v45 Standards will require organizations to conduct AI risk assessments before implementation, repeat them annually, and reassess whenever significant changes occur.
Because most ambulatory care organizations purchase AI rather than develop it, vendor oversight becomes equally important. Leaders should understand how patient data is handled, how models are maintained and updated, how accuracy and bias are evaluated, how performance is monitored, and what cybersecurity protections are in place.
Organizations may outsource technology, but they cannot outsource accountability. Vendor oversight is therefore a patient safety responsibility—not simply a procurement function.
AI Human Oversight and Clinical Decision-Making
AI should support clinical decision-making—not replace it.
AI can summarize documentation, identify care gaps, assist with patient communications, and support clinical decision-making. However, responsibility for diagnosis, treatment, documentation, and patient care always remains with qualified healthcare professionals. Maintaining human oversight helps reduce automation bias while preserving clinical accountability.
Accordingly, AAAHC requires AI-generated clinical information to be reviewed before incorporation into the medical record, reinforcing that clinicians—not algorithms—remain responsible for patient care.
Patient Trust and Transparency
Patient trust depends upon transparency.
As AI becomes more visible in healthcare, organizations should determine when patients should be informed about AI use, when consent may be appropriate, and how human oversight remains part of care delivery.
AAAHC encourages organizations to establish clear policies governing patient notification and consent because transparency strengthens confidence while reinforcing the organization’s commitment to ethical, patient-centered care.
Cybersecurity and Continuous Readiness
Every AI application expands an organization’s cybersecurity responsibilities.
Many ambulatory care organizations depend upon cloud-based vendors, telehealth platforms, patient communication systems, imaging technologies, and connected medical devices. AI adds another layer to this technology ecosystem, making cybersecurity, vendor oversight, workforce education, and risk management increasingly interconnected.
At the same time, AI governance cannot remain static. Unlike traditional software, AI systems continue to evolve through updates, retraining, new applications, and changing regulatory expectations. Organizations should routinely reassess risks, review vendor performance, update policies, educate staff, and measure whether AI delivers meaningful improvements in quality, safety, efficiency, or the patient experience.
Continuous oversight—not one-time implementation—is what enables responsible AI adoption and supports continuous readiness.
Closing Perspective
AI has the potential to transform ambulatory care, but technology alone does not improve quality. Organizations that succeed will be those that pair innovation with strong governance, thoughtful oversight, and an unwavering commitment to patient safety.
AAAHC’s v45 AI Standards will provide a practical framework for responsible AI adoption—one that promotes transparency, accountability, and continuous readiness while preserving the trust at the center of every patient relationship. Ultimately, the success of AI will be measured not by how quickly it is adopted, but by how effectively it improves the quality and safety of ambulatory care.
