Virtual CFO Services for Outpatient Clinics
Fractional describes how much time you buy. Interim describes how long. Virtual describes how the work reaches you, and that is the version of the question with practical answers attached: what we get into, who signs what, and whether anybody ever walks through your door.
At a glance
TL;DR — What is a virtual CFO?
A virtual CFO is a senior finance executive who works with your practice remotely and is retained by the month rather than employed. The scope matches a fractional CFO: monthly close review, cash forecasting, profitability by location and provider, and support on lending, expansion and exit decisions. Virtual describes the delivery model, not the scope. For an outpatient clinic it means the engagement runs inside the cloud systems you already use, on a fixed call cadence, with on-site time reserved for the meetings that earn it. Sorso's engagements start at $4,000 per month.
Virtual, fractional, interim: three different questions
These labels are used interchangeably by firms and by buyers, and most of the time the underlying engagement really is the same one. They are not synonyms though. Each answers a separate question, and knowing which question you are asking is what stops you comparing three quotes for three different things.
Fractional answers how much of the person you are buying. A fractional CFO is part-time and ongoing, filling a seat that never existed because a $6M clinic group cannot justify the full-time salary but still has to price payer contracts and model a second location.
Interim answers how long. An interim CFO fills a seat that is currently empty, usually close to full-time while it lasts, and ends on a date or a hire.
Virtual answers how the work reaches you. It says nothing about hours or duration. It says the person is not in the building, which raises a specific set of questions that the other two words never prompt anybody to ask.
Those questions are the rest of this page. Nearly every fractional engagement in this industry is also a virtual one, so if you are choosing between a fractional CFO and a virtual CFO, you are probably choosing between two descriptions of the same arrangement. What is worth interrogating is the delivery: the cadence, the access, and what you keep at the end.
What a normal month looks like
The rhythm of a remote engagement is set by your close, not by a calendar invite. Nothing useful can be said about last month until last month is closed, so the first part of every cycle is waiting on the books and then reviewing them: not re-checking the bookkeeping, but opening the transactions behind anything that moved in a direction the forecast did not expect.
From there the model and the cash forecast get updated, and the material for your strategy call is written. We send it three to four days ahead, which is the part most owners notice first. Reading a pack in advance turns a 90-minute call from a presentation into an argument about what to do, which is the only version worth having.
Two calls a month is the standard cadence. Between them the channel is email or Slack, and the honest description of that access is that it is unmetered rather than instant. A question about whether to sign a lease gets a considered answer within the day, not a reflex within the minute.
What this replaces is the version where you email your accountant in February and get last year's numbers in March. The point of a fixed cadence is that decisions stop waiting on reporting.
What access you are actually granting
Every firm writes “we will need access to your systems” and leaves it there. Here is the specific version, including the level that is normally enough. If a prospective adviser asks for more than this, the useful question is which deliverable requires it.
| System | Level that is usually enough | Why it is needed |
|---|---|---|
| General ledger (QuickBooks, Xero) | Named user, full access | Reviewing the close means opening the transactions behind it |
| Bank and credit card | Read-only | Cash forecasting needs balances and clearing, never payment rights |
| Payroll platform | Read-only or reports | Provider compensation is most of the cost base |
| Practice management / EHR reporting | Reports, aggregate where possible | Volume, payer mix and A/R aging, not the clinical record |
| Payer portals | By exception | Only when a specific denial or contract question requires it |
Three practices are worth insisting on regardless of who you hire. Named individual logins rather than a shared account, so the audit trail says who did what. Multi-factor authentication on everything that touches money. And an offboarding step written into the engagement, because the risk in remote work is not the access you granted, it is the access nobody revoked.
Read-only is the default for banking for a reason. A CFO needs to see cash clearing; a CFO does not need the ability to move it. Keeping payment rights inside your own staff preserves the separation of duties that makes the review meaningful.
Whether your virtual CFO is a HIPAA business associate
Start with the part most clinic owners get backwards: the answer does not depend on what the service is called. It depends on whether the work involves protected health information.
HIPAA's definition of a business associate, at 45 CFR 160.103, reaches a person who provides “legal, actuarial, accounting, consulting, data aggregation…, management, administrative, accreditation, or financial services” to a covered entity “where the provision of the service involves the disclosure of protected health information.” Accounting and financial services are named in the regulation. The conditional clause at the end is what actually decides it.
So the first control is not encryption. It is scope. Financial reporting for a clinic runs on ledger data, payroll data and aggregate practice management reporting, none of which needs to identify a patient. PHI enters the picture at claim-level detail, typically when somebody is investigating why a payer keeps denying one code. Decide in advance whether your engagement includes that work, and you have decided most of your risk position.
The same section is worth reading for a second reason. It extends business associate status to “a subcontractor that creates, receives, maintains, or transmits protected health information on behalf of the business associate.” If the firm you hire hands part of the work to someone else, that chain is a fair question to ask about before you sign, particularly where any of it sits outside the country.
One more provision applies to your side of the arrangement. HIPAA's minimum necessary standard at 45 CFR 164.502(b) requires a covered entity to “make reasonable efforts to limit protected health information to the minimum necessary to accomplish the intended purpose.” Handing an adviser a full EHR export because it was easier than building the report they asked for is the ordinary way that gets breached.
Sorso executes a business associate agreement before any access to PHI, and our terms and privacy policy set out how that works. None of the above is legal advice, and your counsel should see the agreement before you sign it.
Does anyone ever come to the clinic?
Yes, and rarely, and the distinction between those two answers is about what kind of meeting it is. Reporting travels fine down a video call. Decisions with money and relationships in them travel less well: a partner conversation about distributions, a lender meeting that has started going badly, a buyer working through diligence questions in a room.
In most engagements that comes to a handful of days a year. It is worth budgeting for and worth asking about, and it is not a reason to filter your search by driving distance. Healthcare clinic finance is a narrow specialism, and restricting it to whoever is local usually means choosing a generalist who has never seen your payer mix.
What to compare when you shortlist firms
Every provider in this category describes itself the same way, so the marketing pages will not separate them. These five questions will, and the last one tends to produce the most revealing pause.
On price, compare against the right thing. Firm against firm tells you who discounts hardest. Firm against the fully loaded cost of the in-house role, including benefits, payroll taxes, recruiting and the months a vacant seat stays vacant, tells you whether the category makes sense for you at all. The CFO cost comparison tool lays out that arithmetic, and the fuller comparison covers where each model breaks down.
Handover when there is no office to walk into
When an in-house finance lead leaves, some of the knowledge stays behind by accident. It is in the shared drive, the desk drawer, the colleague who sat next to them. A remote engagement has none of that residue, which means documentation is not a nice-to-have at the end. It is the entire handover.
Four things should exist in your possession from the first month, not the last: the financial model in a format you can open without the firm, a written close checklist, the reporting pack as a repeatable template, and an inventory of every system with who holds access to it. If a provider cannot describe that package on a first call, that is the answer to the question.
This matters more than owners expect, because it is the same package that protects you if the person covering your account changes. The scenario where an undocumented arrangement becomes expensive is set out on our interim CFO page, which exists largely because clinics keep discovering that one person held everything.
What it costs here
Sorso's virtual CFO engagements start at $4,000 per month, with a one-time onboarding fee between $3,000 and $9,000 depending on entity structure, location count and the state of the books on arrival. After onboarding it is month-to-month, and the first 45 days carry a money-back guarantee on the monthly fee.
If your books are the actual problem, CFO work is the wrong purchase and we will say so. Our accounting service starts at $2,000 per month and exists to make the data reliable first. Strategic finance built on numbers nobody trusts produces confident conclusions from bad inputs, which is worse than no conclusions.
Common questions about virtual CFO services
What is a virtual CFO?+
A virtual CFO is a senior finance executive who works with your practice remotely and is retained by the month rather than employed. The scope is the same scope a fractional CFO has: reviewing the monthly close, forecasting cash, analysing profitability by location and provider, and supporting decisions about expansion, lending and exit. The word virtual describes how the work is delivered, not what it covers.
What does a virtual CFO actually do day to day?+
Most of it happens inside systems you already use remotely: the general ledger, the payroll platform, the practice management reporting and the bank. In a normal month that means reviewing the close once your bookkeeper has finished it, updating the cash forecast and the financial model, preparing the material for your strategy call, and answering the questions that come up between calls. The visible part is two calls a month. The rest is work done in your systems before those calls.
How much do virtual CFO services cost?+
Sorso's engagements start at $4,000 per month, with a one-time onboarding fee of $3,000 to $9,000 depending on complexity. Anyone quoting you a figure before understanding your entity structure, location count and the state of your books is guessing. The comparison worth running is not one firm against another but the monthly fee against the fully loaded cost of the equivalent in-house role, which our CFO cost comparison tool sets out.
Is a virtual CFO the same as a fractional CFO or an outsourced CFO?+
In practice, usually yes, and the firms selling all three are often selling the same engagement. The words answer different questions. Fractional answers how much of the person you are buying. Outsourced answers whether the role sits inside or outside the business. Virtual answers how the work reaches you. Interim is the one genuine outlier, because it fills a seat that is currently empty and ends on a date.
Does a virtual CFO need access to patient data?+
Usually not, and that is the first thing worth settling in writing. Financial reporting runs on ledger, payroll and aggregate practice management data. Protected health information tends to appear only when someone goes down to claim-level detail to investigate a denial pattern. Deciding up front whether the engagement needs that level of detail does more for your risk position than any single security control, because access you never granted cannot be misused.
Do we need a business associate agreement with our CFO firm?+
It depends on whether the work involves protected health information, not on what the service is called. HIPAA's definition of a business associate at 45 CFR 160.103 covers a person providing accounting, consulting, management, administrative or financial services to a covered entity where providing that service involves the disclosure of protected health information. If your engagement touches PHI, a BAA belongs in place before access does. If it genuinely never will, write that down instead of leaving it unsaid. Sorso executes a BAA before any access to PHI.
Will anyone from the firm ever come to the clinic?+
By exception rather than by schedule. The meetings that reward being in the room are decisions rather than reporting: a partner conversation about distributions, a lender meeting that is going badly, a buyer's diligence session. Those come to a handful of days a year in most engagements. Requiring weekly physical presence mostly narrows your choice of adviser to whoever is nearby.
Do virtual CFO services make sense for a small practice?+
Below roughly $3M in annual revenue, the honest answer is usually not yet. What most practices that size need first is books they can trust and a monthly report that arrives on time, which is an accounting engagement rather than a CFO one. Our accounting service starts at $2,000 per month. Buying strategic finance on top of unreliable data produces confident conclusions from bad inputs.
How do we hire a virtual CFO without a long procurement?+
Three things move it along. Write down the decisions you expect to face in the next year, because that is what you are actually buying. Ask who personally runs your month-end and what happens the week they are unavailable. Then agree the access list before the start date rather than after, since the delay in remote engagements is almost never the contract, it is waiting on logins.
What happens if we want to end the engagement?+
You should know the answer before you start. With no office and no filing cabinet, the handover is entirely documentation: the financial model in a format you can open, the close checklist, the reporting pack, and an inventory of every system and who holds access to it. Ask a prospective firm what that package contains. Sorso engagements are month-to-month after onboarding, with a 45-day money-back guarantee on the monthly fee.
Find out what a CFO would ask about your numbers
Four minutes, and you get a straight read on where your practice stands before anybody tries to sell you anything.