Industry focus

Software and AI systems for Healthcare

We build patient intake, scheduling, clinical document extraction and front-desk assistants for healthcare teams, designed around HIPAA, GDPR Article 9, India's DPDP Act and HL7 FHIR.

What do we build for healthcare teams?

  • Patient intake, scheduling and reminders
  • Clinical document extraction and summaries, reviewed by staff
  • Front-desk and call assistants with a handoff to a person
  • Reporting across clinics and systems

Which rules do we design for?

HIPAA
US protected health information, and BAAs with vendors
GDPR Art. 9
Health data as a special category in the EU
DPDP Act, 2023
India's digital personal data protection law
HL7 FHIR
The standard for exchanging clinical records

We design and build to these requirements. Certification, audits and legal sign-off stay with your auditors and counsel.

What's the hard part?

Deciding which data may reach a model provider at all, and under which agreement. In the US that means a Business Associate Agreement; in the EU, a lawful basis for special-category data. We design that boundary before the first prompt.

Healthcare: questions and answers

Can patient data be sent to an AI model?

Only across a boundary designed for it. In the US that means a Business Associate Agreement with the provider; in the EU, a lawful basis for special-category data. We decide what data may reach a model provider at all before the first prompt.

Do AI summaries of clinical documents go straight into the record?

No. Extraction and summaries are reviewed by staff, and front-desk or call assistants hand off to a person.

Do you handle HIPAA and GDPR compliance?

We design and build to HIPAA and GDPR requirements, including where health data may and may not go. Certification, audits and legal sign-off stay with your compliance team, auditors and counsel.

We work across industries and go deepest in three. Also see real estate and financial services.

Working on a healthcare system?

Tell us about it in the brief: about three minutes, and nothing is sent until you press Send. Please don't include passwords, patient records or card numbers.