Selling to Hospitals: 10 Questions Founders Ask

Selling to a hospital runs through a predictable sequence, even though the specific people change from one hospital to the next. A clinical or operational champion has to want your product. A formal evaluation body — often called a value analysis committee, or VAC — has to bless it. IT and security have to clear it. Legal has to sign off on contract language. Finance has to confirm a budget line exists. None of these parties act on your timeline, and any single one of them can stall or kill a deal every other party has already approved.

Quick Answer: Hospitals buy through a multi-gate process — clinical champion, value analysis committee, IT/security review, legal, and finance — and any one gatekeeper can stall the deal regardless of how enthusiastic the others are. There is no single "hospital buyer." The buyer, user, and payer split that defines healthcare generally shows up inside the hospital's own walls, department by department.

The ten questions below are the ones founders actually ask before their first hospital deal — not procurement theory, but the practical mechanics of getting from a demo to a signature. None of them assume you already have a champion, a security packet, or a pricing model; work through them roughly in order and you'll surface the gaps before a real evaluation does it for you. If you haven't yet confirmed that hospitals are the right first buyer for your idea at all, work through the complete guide to startup idea validation before you build a hospital-specific sales motion around a problem nobody's confirmed they'll pay to fix.

How Hospital Buying Actually Works, Question by Question

How do hospitals actually buy software or new products?

Almost never through a single decision-maker. A clinical or operational staffer identifies a need or gets pitched by you, then champions it internally. From there the request typically moves through a value analysis or product evaluation committee, an IT/security review, a legal contract review, and a finance budget check — usually in that rough order, though hospitals vary in how formally each step is run. Your job is to find the champion first; everything after that is surviving the gates.

What is a value analysis committee, and why does it matter?

A value analysis committee (VAC) is a standing group — usually clinical, operational, and finance staff — that formally evaluates non-trivial purchases against clinical need, cost, and existing alternatives before a hospital commits. It matters because it's often the gate that decides whether your product gets a real evaluation at all, and because VACs meet on a fixed cadence, not on demand. Missing a submission deadline for one meeting can cost you a full cycle before the next.

Who makes the final purchasing decision at a hospital?

There usually isn't one person — there's a chain. A department head or clinical champion sponsors the request, a committee evaluates it, and depending on the dollar amount, sign-off might land with a department director, a VP, or the C-suite for large contracts. The practical answer: ask directly, early, "who signs this, and what has to happen before they will?" Founders who skip that question spend months convincing people who were never going to be the signature.

What does a hospital security review involve?

Expect a review of how your product handles data — where it's stored, who can access it, how it's encrypted in transit and at rest, and whether it touches protected health information. Hospitals typically use a standardized security questionnaire (many rely on frameworks like HITRUST or a vendor risk assessment built on similar controls) and may require a signed Business Associate Agreement if PHI is involved. Get your security documentation built before your first serious conversation, not after a committee asks for it.

How long does it take to close a deal with a hospital?

Longer than almost any founder expects going in, and the honest answer is that no single sourced average is reliable enough to plan around — deal length depends on how many functions must sign off, whether the purchase needs new budget or fits an existing line, and where your request lands in the buyer's fiscal year. Our hospital sales cycle benchmarks piece walks through why generic averages don't hold up and how to track your own pipeline instead of borrowing someone else's number.

Should I start with a pilot, or try to sell a full contract right away?

For most early-stage startups, a structured pilot is the more realistic entry point — it lowers the initial commitment a hospital has to make and gives you a live reference. The catch: a pilot without pre-agreed success metrics and a defined conversion path is free consulting with a start date and no end date. Use a hospital pilot proposal template that locks in numeric success criteria and what happens if you hit them, before you ever propose one.

What budget cycle do hospitals use, and why does it matter for timing?

Most hospitals run on an annual fiscal-year budget, and unbudgeted purchases either wait for the next cycle or get pushed through as an exception — which is harder to win and slower to approve. Ask your champion early which fiscal year your purchase would fall under and whether it's already accounted for in a budget line. Pitching six months before a new fiscal year starts gives you a real shot at being budgeted in; pitching mid-cycle usually means competing for exception approval.

Do I need a signed BAA before I even start selling?

Not to start conversations, but you need one in place before any protected health information flows to your systems — and you should have your BAA-readiness story (data handling, subcontractors, breach notification process) prepared well before a security review asks for it. If your product never touches PHI, say so clearly and be ready to explain exactly why, because reviewers will ask and a vague answer reads as inexperience, not confidence.

How much does a small hospital's buying process differ from a large health system's?

Considerably. A small or critical-access hospital may let one administrator approve a purchase under a set dollar threshold with no formal committee at all. A large academic health system routes the same category of purchase through a standing VAC, a separate security review, legal redlining, and a finance sign-off tied to a specific line item — gates the small hospital may skip entirely. Neither is "the" hospital buying process; ask early which shape you're dealing with so you don't over- or under-prepare.

What's the single biggest mistake early-stage founders make selling to hospitals?

Treating enthusiasm from a clinician as a signed deal. A department head who loves your demo is a necessary signal, not a sufficient one — they usually aren't the budget owner, the security reviewer, or the committee vote. The fix is to ask your champion directly, in the first real conversation, who else has to say yes and what each of those people will need to see. Founders who skip that question discover the real gatekeepers only after months of goodwill with the wrong person.

Hospital Buying Stages, Gatekeepers, and Typical Documents

The table below maps the buying process to who controls each gate and what they'll typically ask you to produce — useful as a checklist before your first real conversation, not a guarantee every hospital runs all six stages formally.

Read the table as a map, not a script: the order and formality of each stage shift with hospital size, product category, and whether PHI is involved, but the same six functions show up in nearly every hospital sale. Knowing which one you're stuck at is more useful than knowing the deal's total elapsed time. If your pipeline has stalled and you can't say which of the six stages is holding you up, that's the first thing to find out — ask your champion directly which gate the request is sitting in, rather than assuming it's still "under review" in a general sense.

Key Takeaways

• There's no single hospital buyer. A clinical champion, a value analysis committee, IT/security, legal, and finance each have independent veto power, and enthusiasm from one doesn't bind the others.
• Find your champion first, then ask who else has to say yes. The single most common early mistake is mistaking a clinician's enthusiasm for a closed deal.
• A VAC runs on a fixed cadence, not on demand. Missing a submission deadline can cost you a full evaluation cycle, so ask about meeting dates on day one.
• Security review readiness is a prerequisite, not a reaction. Have your data-handling documentation and BAA-readiness story built before a reviewer asks for it.
• Budget timing matters as much as the pitch. A purchase that fits an existing fiscal-year budget line moves faster than one that needs a new one or lands mid-cycle.
• Small hospitals and large health systems are different buying processes, not the same process at different speeds — confirm which shape you're in early.
• A pilot without pre-agreed success criteria and a conversion clause is free consulting. Structure it like a sales document, not a favor.

Frequently Asked Questions

Can a two-person startup realistically sell to a hospital?

Yes, but expect the security and legal gates to be the hardest part, not the pitch itself — hospitals evaluate vendor risk regardless of company size. A small team can close hospital deals by being disproportionately prepared on documentation (security questionnaire, data handling, contract terms) and by targeting a single willing champion rather than trying to run a broad outbound motion before you have a reference.

Is it worth hiring a healthcare-specific salesperson before my first hospital deal?

Usually not before you've closed at least one deal yourself. Founders who've personally navigated a VAC, a security review, and a legal redline understand the buying process well enough to hire accurately for it later — and to evaluate whether a candidate's "healthcare experience" is real or a resume line. Hire the specialist once you know what you're specializing for.

What's the difference between selling to a single hospital and selling to a health system?

A single, independent hospital usually has one buying process to learn. A health system with multiple sites often means the process you learned at one facility doesn't automatically apply system-wide — a system-level VAC, security team, or legal function may sit above the individual hospital's, and a champion at one site may have no authority to commit the others. Confirm early whether you're selling to a site or to the system before you assume a first win will scale, and don't be surprised if a signed contract at one facility still requires a second, separate evaluation before a sister facility in the same system will adopt it.