Sovereign AI · HIPAA

Internal healthcare agents, inside the environment where PHI already lives.

For the team that will not send a chart to a public model API. We deploy the model and the administrative agent inside the environment you already treat as in scope, and leave a data-flow map, an access model, and an audit log. Your counsel decides scope. We do not issue a certificate.

0 In-scope records sent to a public model API at inference
0 Certificates this engagement issues
30 min Scoping call

Who this is for

For

A healthcare operator, a compliance lead, or a CIO who wants an agent on administrative work: intake, billing support, prior-auth packets, internal policy lookup.

Not for

A diagnosis model, a patient-facing chatbot, or a certificate to show a board. A Business Associate Agreement is a contract with whoever processes PHI. It is not the product on this page.

What you keep

The running system inside your boundary, a data-flow map, an access model, and an audit log. You still own the policy and the sign-off. The engagement is a fixed milestone, and the founder is in it. Without access to the workflow and the boundary, there is no engagement.

Back to Sovereign AI, the parent line, which covers the EU boundary and on-premise deployment generally.

For the cost side, read Healthcare administration, the cost context. That essay is industry context. It is not an AIPIVT client result.

Common questions

The agent runs inside the environment you already treat as in scope for protected health information. Prompts and records do not go to a public model API. We do not certify the deployment, and we do not issue a HIPAA certificate. Counsel decides scope.

No. We do not issue a certificate. Your counsel and your auditor decide whether the environment is in scope.

No. Those frameworks are the parent Sovereign AI page. If the entity is in the EU and the issue is GDPR, start there. This page is the US healthcare boundary.

No. Administrative workflows only. A clinical decision is a different product, and we are not selling it.

Book a scoping call

Thirty minutes on whether the environment your team already treats as in scope is enough for an administrative agent. If the blocker is a clinical decision, we will say so.

Back to Sovereign AI