Selling to UnitedHealth Group

UnitedHealth Group reported 112.0 billion dollars of revenue in the second quarter of 2026 alone, and ended 2025 with more than 390,000 employees, nearly 165,000 of them clinical professionals. That makes it the largest single buyer in American healthcare, and it hides what actually decides whether you have a business here.

UnitedHealth Group is not one company. It reports four segments: Optum Health, Optum Insight, Optum Rx and UnitedHealthcare, and which one your deal belongs to changes the buyer, the budget, the compliance path and the competitor. Sell into UnitedHealthcare and you are selling to a health insurer. Sell into Optum and you are selling to one of the largest health technology and care delivery organisations in the world, which probably already sells something adjacent to yours. Getting that wrong is the most expensive mistake here.

How the buying process actually runs

Procurement is centralised. Demand is not. A shared service organisation called Enterprise Sourcing and Procurement runs sourcing, and existing suppliers transact through the Ariba Network. That is plumbing, not pipeline. The requirement and the budget originate in a segment, long before procurement is involved.

HITRUST is a gate, not a nice to have. UnitedHealth Group's own supplier page is blunt: if your organisation will have access to Protected Health Information or Personally Identifiable Information, you will need a HITRUST certification or an equivalent level of certification. This is the largest single difference between selling here and selling to a bank. A SOC 2 Type II report that satisfies a financial services risk team is a starting position here, not an answer. If you do not hold HITRUST CSF certification and cannot put a date on when you will, you have a remediation project with a logo attached, not a qualified opportunity.

You will probably sign a business associate agreement. In its 2025 Form 10-K the company states that, depending on the circumstances, it may act as either a covered entity or a business associate under HIPAA. If you handle PHI on its behalf, HITECH pushes privacy, security and breach notification duties onto you by contract. The same filing discloses that the recently acquired Change Healthcare business was subject to a 2024 cyberattack in which the data involved contained protected health information. You are being reviewed by an organisation that has lived through a compromise in its own supply chain.

Delegated entities get a separate regime. UnitedHealth Group publishes a Delegated Entity Compliance Program for suppliers performing functions on its behalf in its Medicare and Medicaid business, and routes risk questionnaires, attestations and remediation documentation through an External Vendor Portal. If your product performs a function CMS treats as delegable, you are on that track.

If your product uses AI, there is one more review. UnitedHealth Group runs a Responsible AI programme with an AI Review Board of clinicians, data scientists, business leaders, privacy and security experts and ethicists, plus an internal platform called United AI Studio, and its chief digital and technology officer has cited more than 1,000 active AI use cases. You are not introducing AI to this buyer, and clinical defensibility gets asked about before commercial terms.

Who owns what, so you know which half your deal belongs to

You will not be selling to these people. Their remits tell you which side of the house your deal sits on, and whose priorities it must survive two or three levels down.

Roles from the 2026 proxy statement, verified 11 September 2026. Wayne DeVeydt is Chief Financial Officer. Roles change, so verify at source.

Why you cannot sell into this account from the bottom

A deal that justifies the cost of selling into an organisation this size is measured in millions a year, and for anything touching claims, clinical workflow or member data it runs well beyond that over a multi year term. That is approved in a segment C suite or one level into it, which sets the altitude your entry point must reach.

There is a second problem with no equivalent at a bank. Optum Insight sells data, analytics, consulting, technology and managed services to hospital systems, health plans, state governments and life sciences companies, and its aggregate backlog as of 31 December 2025 was approximately 31.1 billion dollars, of which 12.9 billion related to affiliated agreements. Read that second figure carefully. Optum books billions of dollars of work done for its own sister businesses. Your competitor on a UnitedHealthcare deal is often not another vendor. It is Optum, already inside, already compliant, already contracted.

Optum Health alone serves more than 100 health payer partners, so Optum also sells to UnitedHealthcare's competitors. Pitch both halves the same way and you will be politely filed.

The layer that matters sits below the public names, and here it is unusually hard to map

The executives above are easy to find and are not who you sell to. The people who matter are segment technology leaders, platform and product owners in Optum Insight and Optum Rx, clinical operations leaders in Optum Health, and programme leads in UnitedHealthcare's Employer and Individual, Medicare and Retirement, and Community and State businesses.

Two things make that layer harder to map here than at a comparable Global 500 company. First, the boundary moves: on 1 January 2026 the company realigned Optum Financial, including Optum Bank, out of Optum Health and into Optum Insight, so a sponsor you cultivated last year may now sit under a different P and L. Second, in an organisation of more than 390,000 people, nearly 165,000 of them clinical, the sponsor population for any one category is small, specialised, and almost entirely absent from leadership pages. The map exists, but it is built one person at a time.

The board is a published second degree map, and in healthcare it is an unusually good one

Nine directors were re elected at the June 2026 annual meeting. Read the list as a seller.

Scott Gottlieb, M.D. is a former Commissioner of the US Food and Drug Administration, currently a Senior Fellow at the American Enterprise Institute and a Special Partner at New Enterprise Associates. He currently sits on the boards of Pfizer, Tempus AI and Illumina. John Noseworthy, M.D. is the former President and CEO of Mayo Clinic. Valerie Montgomery Rice, M.D. is the current President and CEO of Morehouse School of Medicine and chairs the Health and Clinical Practice Policies Committee. Charles Baker is the current President of the National Collegiate Athletic Association, a former Governor of Massachusetts and former CEO of Harvard Pilgrim Health Care.

F. William McNabb III is Lead Independent Director, formerly Chairman and CEO of The Vanguard Group, currently a director of IBM. Timothy Flynn, former Chairman of KPMG International, is currently a director of Walmart. Paul Garcia, retired Chairman and CEO of Global Payments, is currently a director of Deluxe and Repay Holdings. Kristen Gil is a former Vice President and Business Finance Officer at Alphabet. Stephen Hemsley is Chair and CEO.

Three of the nine are physicians and the board runs a standing Health and Clinical Practice Policies Committee. That tells you something no supplier portal will: clinical credibility is a board level concern here, not a marketing angle. It also gives you a checkable list. If anyone in your network is senior at Pfizer, Tempus AI, Illumina, Mayo Clinic, Morehouse School of Medicine, the NCAA, IBM, Walmart, Vanguard, Deluxe, Repay, Global Payments, KPMG or Alphabet, there is a two hop path to a director. That map is public, and almost nobody uses it.

Your other routes in, and why there are too many to evaluate by hand

Your healthcare customers. Payer and health system leadership is a small world, and people move between payers, providers and vendors constantly. A clinical or operations champion who has watched your product work at another payer is a more credible referrer than anyone on your payroll.

Alumni, including of acquired businesses. Optum has absorbed a long list of health technology, pharmacy and physician organisations, so anyone who worked at one before the transaction now has former colleagues inside Optum. There is a UnitedHealth Group Alumni presence on LinkedIn but no open public alumni directory of the kind some banks run, which makes the acquired company route more valuable here, not less.

Partners already inside. Optum Insight distributes through alliances with technology vendors who integrate its products with their own. Those partners can route you to the team with the problem, and often want to.

So you are not looking at a handful of routes in. You are looking at hundreds of thousands of relationships, any one of which might be one hop from the person who matters. The rep's real job is a matching problem: which of our relationships touches which of their sponsors, in which segment, and which path is strong enough to spend. Nobody solves that from memory, which is why the motion stalls at asking the CEO whether she knows anyone. Finding the paths that exist is what a relationship intelligence platform is for.

And then you have to get to your own connector

This step fails more introductions than the external ask does. Suppose your best path runs through a board member who sits on another board with a UnitedHealth Group director. That is about as strong as it gets, and close to unrepeatable. You are asking that person to spend a relationship that took years to build, on you. Ask twice in a quarter and you will not be asked again.

The same applies at every level. Asking a customer champion at another payer to introduce you to a peer here is asking them to lend you their credibility in an industry where everyone knows everyone. Ask badly or too often and you degrade the relationship that made the introduction possible. Most companies have no idea who else is already asking that connector this quarter.

Three rules for the introduction itself

Name the segment, not the company. "An introduction to whoever owns payment integrity analytics in Optum Insight" is actionable. "An introduction to UnitedHealth" is not.

Write the blurb your connector will forward. They will not write your pitch, and in healthcare they will not vouch for a claim they cannot defend. Give them a paragraph they can send unedited, and make sure it says what your product does with PHI. The forwardable blurb is the whole craft.

A warm path starts the clock, it does not skip it. You still go through HITRUST or equivalent evidence, the business associate agreement, security review and delegated entity attestations. What the introduction buys is a real conversation with someone who has a problem and a budget, months earlier, and a buying committee you can see. Use those months to build a second and third relationship in the segment, because sponsors here move.

See the warm paths into UnitedHealth Group

Everything above describes the problem: a sister business already inside, already compliant, already bidding. What it does not tell you is which of your own relationships already reaches inside. That is a question about your network, not theirs, and it is the one most teams answer from memory.

Boomerang maps the warm paths your company already has into accounts like UnitedHealth Group, across your team, your customers, your board and investors, and your partners. It then drafts the ask, routes it through the right connector and tracks it to a booked meeting. Book a 15-minute walkthrough and see it run against your own target accounts.