# Pre-Mortem: HIPAA-Compliant Patient-Intake SaaS for Dental Practices ## 1. FAILURE NARRATIVE It's November 2027. The wind-down email went out last Tuesday. The LOI practice — the one from the original deck — never converted to a paid contract; they piloted for five months, asked for three integrations you couldn't build, and quietly went back to MODENTO's intake module when their renewal came up. The build took seven months, not four. The HIPAA work alone — BAAs with every subprocessor, audit logging, an actual risk assessment, getting a SOC 2 Type 1 because three prospects asked — ate two months no one had budgeted. You shipped a working product in month eight with $230K left. Outbound started in month nine. The reply rate wasn't 2%. It was 0.6%. Office managers replied politely and then said they'd "need to ask the doctor." The doctor, it turned out, was the buyer, and the doctor's frame of reference wasn't your product — it was Weave, Modento, Dentrix Ascend, and the intake module their PMS vendor had quietly shipped in Q2. You weren't a category; you were a feature competing with bundled features. Three demos in, you realized every prospect was asking the same question: "Does this write back to Dentrix/Eaglesoft/Open Dental?" The answer was "partially, for Open Dental." That killed roughly 70% of the addressable list. The inflection point was a call in month fourteen with the LOI practice's office manager. She said: "We love you guys, but Dr. Patel wants one vendor for the chair and the front desk. We're not going to fight him on this." You hung up and your co-founder said, quietly, "We built the wrong wedge." Not the wrong product — the wrong wedge. Intake was never going to be the thing someone bought standalone from two strangers with no dental references; it was going to be the thing a PMS added or a known brand extended. You had four paying practices at MRR $2,800 when you decided to stop. The runway said three more months. The market said the next twelve wouldn't change the verdict. Two co-founders, eighteen months, $400K, and the answer was: the buyer wasn't who you thought, the moat wasn't a moat, and the integration story was the actual product. ## 2. FAILURE MODES, RANKED **1. The Wrong Buyer** - **Mechanism:** Office managers screen and influence; dentists/owners sign. Your entire outbound motion is optimized for the screener, not the decider, so meetings happen but deals don't. - **Probability:** High - **Impact:** Fatal - **Why easy to miss:** Office managers *do* engage with you. They take demos, they say nice things, they "love it." The signal looks like progress. The structural fact — that in a 4-location practice the owner-dentist or DSO controls software spend above ~$300/month — only surfaces at the contract stage, by which point you've burned weeks per deal. **2. The PMS Bundling Squeeze** - **Mechanism:** Dentrix, Eaglesoft, Open Dental, Curve, and Dentrix Ascend either already ship intake or are six months from it. Your standalone product gets compared not to "no intake" but to "free-with-our-PMS intake." - **Probability:** High - **Impact:** Fatal - **Why easy to miss:** Founders without industry context underestimate how aggressively vertical SaaS incumbents bundle. You'll evaluate competitors by feature parity and conclude you're better. The buyer evaluates by procurement friction and concludes you're a second vendor to manage. **3. The Integration Tax** - **Mechanism:** Patient intake is worthless if it doesn't write back into the practice management system. Dentrix and Eaglesoft are notoriously closed; Open Dental is open but only ~20% market share. Real integrations take months each and require partner-program access you may not get. - **Probability:** High - **Impact:** Significant-to-Fatal - **Why easy to miss:** Two technical co-founders will look at the problem and think "we can build adapters." The blocker isn't engineering — it's vendor relationships, certifications, and in some cases legal access. You can't bench-press your way through Henry Schein's partner gate. **4. HIPAA-as-Moat Illusion** - **Mechanism:** Every serious competitor is already HIPAA-compliant. It's table stakes, not differentiation. The work of getting there consumes your runway without producing competitive lift. - **Probability:** High (that it fails as a moat) - **Impact:** Significant - **Why easy to miss:** From the outside, HIPAA *sounds* like a barrier — and it is a barrier to entry, just not one that produces pricing power once you're inside. Founders confuse "hard to do" with "valuable once done." **5. Reference Vacuum** - **Mechanism:** Dental is a tight, word-of-mouth market. Without 8-10 named practice references with logos and quotable outcomes, outbound conversion stays at fractions of a percent. You need references to get references. - **Probability:** Medium-High - **Impact:** Significant - **Why easy to miss:** The first LOI feels like proof of demand. It is proof of one practice's interest. References require not just customers but customers who'll go on camera, and that takes 6+ months of relationship after they're already live. **6. The 4-Month Build Fantasy** - **Mechanism:** HIPAA infrastructure, BAAs, audit logging, SOC 2 prep (which prospects will request), and at least one PMS integration cannot be built in four months by two people. Realistic: 7-9. - **Probability:** High - **Impact:** Significant (compounds runway pressure) - **Why easy to miss:** Technical co-founders estimate the *software*. The work that breaks the estimate is the legal/compliance/integration scaffolding around it, which doesn't feel like "building" and so doesn't get tracked. **7. Office-Manager Churn Surface** - **Mechanism:** Office managers turn over at roughly 25-30% annually in dental. If your champion leaves mid-pilot, the new manager has no investment in your tool and the doctor will ask "do we still need this?" - **Probability:** Medium - **Impact:** Significant - **Why easy to miss:** You'll track logins and feature usage. You won't track *who* the logged-in user is until the LinkedIn notification fires. **8. DSO Sales Cycle Reality** *(demoted)* - **Mechanism:** Mid-size practices (4+ locations) are increasingly DSO-owned or DSO-adjacent, which means 9-12 month procurement cycles. - **Probability:** Medium - **Impact:** Significant - **Why demoted:** Real risk, but your stated ICP ("mid-size practices") is ambiguous enough that you can still find independently-owned 2-4 location groups with faster cycles. This is a targeting problem, not a structural one — and it's downstream of #1. ## 3. CHALLENGED ASSUMPTIONS **"Office managers have buying authority."** False in most independently-owned dental practices above one location. Owner-dentists control software spend; office managers control day-to-day vendor management and recommendations. The weak evidence you're likely treating as strong: office managers who say "I'd buy this" in discovery calls. They mean "I'd recommend this." Test it by asking — in the first call — "Walk me through the last three software tools you adopted. Who signed the contract?" **"HIPAA compliance is a moat."** False. It's a filter against unserious entrants and a checkbox for serious ones. Every named competitor (Weave, Modento, RevenueWell, Yapi, Solutionreach) is HIPAA-compliant. The moat in dental SaaS is integration depth + reference density + PMS partnership status — none of which $400K and 11 months buys you. **"Outbound to dental practices will hit a 2% reply rate."** 2% is a B2B SaaS benchmark for warm, well-targeted cold email to known-receptive segments. Dental front offices are saturated with vendor outreach — every PMS, every imaging vendor, every supply distributor, every marketing agency. Realistic reply rate from cold outbound to office managers: 0.3-0.8%. Reply ≠ meeting; meeting ≠ qualified; qualified ≠ closed. You may need 400-700 contacts per closed deal at your stage. **"We can build the product in 4 months."** Almost certainly false. The product surface (intake forms, e-signature, payment, photo upload) is 4 months. The compliance scaffolding, one real PMS integration, and the operational tooling to onboard a practice are another 3-5 months. You're estimating the iceberg above the waterline. **Unstated assumptions embedded in the plan:** - *That "patient intake" is a category buyers shop for.* It probably isn't. Buyers shop for "front office software" or "patient communication" — categories where Weave and Solutionreach already dominate. You're entering as a feature, not a category. - *That two technical co-founders without healthcare backgrounds can navigate a relationship-driven vertical.* Dental software sales rides on conferences (Greater NY, Chicago Midwinter), KOL endorsements, and study-club word of mouth. Neither of you has access to these networks. Cost of acquiring access: significant time, not money. - *That $400K / 11 months / 2 people is enough to validate this thesis.* For pure-play horizontal SaaS, maybe. For HIPAA-regulated vertical SaaS requiring PMS integrations and reference customers, you are 30-40% underfunded for the wedge as described. - *That the LOI represents demand.* One LOI from one practice with no money attached represents one person's interest. The base rate of LOIs converting to paid contracts in early-stage B2B is roughly 20-40%. ## 4. LEADING INDICATORS **For #1 (The Wrong Buyer):** - **Month 2-3 of outbound:** Track the ratio of "office manager said yes to a demo" → "decision-maker (dentist/owner) attended the second call." If this ratio is below 40% across your first 15 demos, the office-manager thesis is broken. - **Month 4-5:** Average days from first meeting to signed contract. If above 75 days for sub-$10K ACV deals, the buying process is more complex than the GTM assumes. - **Month 5-6:** Look at lost deals. If >50% of "no" reasons trace to "doctor said no" or "we went with our PMS's option," the buyer thesis is dead, not just slow. **For #2 (PMS Bundling Squeeze):** - **Month 1-3:** During discovery calls, count the percentage of prospects who say "our PMS just added that" or "we're waiting to see what Dentrix does." If above 25% by call #20, you're selling against bundled features, not solving a real gap. - **Month 3-6:** Monitor Dentrix Ascend, Curve, and Open Dental release notes monthly. Any one of them shipping a credible intake module within your launch window collapses 30-50% of your TAM overnight. - **Month 6-9:** Net new pipeline growth rate. If month-over-month pipeline is flat or declining after outbound is fully ramped, the category is being absorbed upstream. **For #3 (The Integration Tax):** - **Month 1-2:** Time from "we requested Dentrix partner program access" to "we received credentials." If above 60 days or unanswered, your integration story for the largest PMS in the market is structurally blocked, not just slow. - **Month 3-4:** Percentage of qualified prospects whose PMS you can write to bidirectionally. If below 35%, your serviceable market is a fraction of what the deck claims. - **Month 4-6:** Pilot-to-paid conversion rate where "no PMS integration" is cited in the lost-deal notes. If >40%, this is the binding constraint, not GTM. ## 5. MITIGATION PLAYBOOK **For #1 (The Wrong Buyer):** - **PREVENT:** Rewrite the outbound playbook before launch to target dentist-owners directly, using office managers as warm intros rather than primary contacts. Build a separate, shorter-form message track for dentists that leads with revenue impact ($/chair/day from faster intake), not features. Cost: two weeks of copy and list rework. Saves: months of chasing the wrong yes. - **DETECT:** In the CRM, require every opp to name the economic buyer by week 2 of the deal. If unknown after week 2, the opp is auto-tagged "buyer unclear" and reviewed weekly. This forces the question early. - **RESPOND:** If the month-5 lost-deal review shows >50% doctor-driven losses, immediately pivot the ICP to solo-practitioner or 2-location practices where the dentist *is* the office manager. This is a smaller market but a coherent buyer. **For #2 (PMS Bundling Squeeze):** - **PREVENT:** Before writing more product code, spend three weeks interviewing 20 office managers and 10 dentists with a single question: "If your PMS shipped intake tomorrow, would you still want a separate tool?" If the answer is "no" from more than half, the standalone wedge is wrong and you should reposition as a PMS partner or pick a different wedge (e.g., insurance verification, where PMS coverage is genuinely weak). - **DETECT:** Maintain a one-page "competitive intelligence" doc updated monthly with PMS release notes and pricing. Make this a co-founder ritual, not a "when we get to it" task. - **RESPOND:** If a major PMS ships competing intake mid-build, do not finish the original product. Pivot the same engineering work into either (a) a PMS-agnostic integration layer for practices running multiple PMSes, or (b) an adjacent workflow the PMS is unlikely to touch (e.g., insurance pre-auth, treatment-plan financing intake). **For #3 (The Integration Tax):** - **PREVENT:** In month 1, before any outbound, apply for Dentrix, Eaglesoft, and Open Dental partner programs. Treat this as a critical-path dependency, not a side quest. If Dentrix denies or stalls partner access, you have a strategic decision — narrow ICP to Open Dental shops only, or accept that your moat is integration depth on a single PMS rather than breadth. - **DETECT:** Track "PMS integration depth" as a leading metric in the weekly review — not just "do we have an integration" but "can we write X data types bidirectionally without manual sync." A green-yellow-red status per PMS, visible to both co-founders. - **RESPOND:** If by month 4 you have only Open Dental integration working, formally narrow ICP to Open Dental practices in marketing and outbound. This is roughly 20% of US dental practices — still 30,000+ potential customers, more focusable, and avoids selling a half-broken product to Dentrix shops. **For #6 (The 4-Month Build Fantasy):** - **PREVENT:** Rebuild the build plan with HIPAA, BAAs, and one PMS integration as named line items with their own owners and dates. If the honest total is 7 months, plan around 7 — don't compress on paper and overrun in reality. - **DETECT:** Weekly burn-rate dashboard showing months-of-runway-at-current-burn. The number, not a feeling. - **RESPOND:** If you cross month 6 without a shippable product, do not raise a bridge. Cut scope to whatever can ship in 4 more weeks even if it's embarrassingly thin, and start collecting real usage data. The risk you cannot recover from is reaching month 11 with no customers — not shipping something narrow. --- **Where the plan has real strengths worth preserving:** Two technical co-founders means you can build without contractors, which protects margin and IP. $400K is light but not absurd for a vertical SaaS wedge. The LOI, while not predictive of revenue, signals you have the basic skill to get a stranger to commit something on paper — which is non-trivial. And dental is a real market with real pain in patient intake; the question this pre-mortem raises is not "is the problem real" but "are you the right shape of company to capture it, on this budget, against these incumbents, through this buyer." Those are answerable in the first 90 days if you instrument the indicators above. Don't wait until month 14 to find out.