Clinical tools, not wire formats
Agents reason over "admissions for ward X in the last 24h" or "medication list for encounter Y" — narrow, reviewable surfaces that a privacy officer can approve one by one.
- HL7 v2 + FHIR R4 native connectors
- Purpose-built tools per use case
- Minimum-necessary by design
PHI protection in depth
Per-agent mTLS identity, OPA policy evaluated on every call, and direct-identifier redaction at the gateway — before results ever reach a context window.
- No shared service accounts
- Fail-closed policy, outside the model
- PII/PHI redaction per result
- Per-session budgets + circuit breaker
Evidence for the HIPAA Security Rule
Unique identification, access control, audit controls, minimum necessary, transmission security — each control has a default artifact: per-call, exportable, verifiable.
- Append-only hash-chained audit
- Policy decision log with denials
- Per-call data-flow records
- Offline integrity verification
Fits hospital topology
Deploys on the hospital's own Kubernetes, mediates inside the perimeter, fits segmented clinical VLANs — including fully air-gapped research environments.
- No cloud dependency of any kind
- Interface-engine friendly
- Air-gap deployment option
- Live in one afternoon