Customers / Industries / Healthcare
AI governance and privacy for healthcare organizations
AI governance for clinics, behavioral health providers, health systems, and health technology companies, built around HIPAA and state health AI laws.
The rules that shape AI in healthcare
HIPAA Privacy and Security Rules
Any AI tool that handles protected health information needs a business associate agreement and a place in your security risk analysis.
42 CFR Part 2
Substance use disorder records carry added protections that limit how AI tools may use them.
State AI therapy laws
Illinois, Nevada, and Utah restrict AI in mental health care and require disclosures for mental health chatbots.
Colorado and California automated decision rules
Rules taking effect January 1, 2027 cover certain automated decisions, including some in health care.
State AI laws to watch
These states regulate AI in health coverage decisions, clinical documentation, or mental health care. See every state on the AI Laws by State map.
AI training for your teams
Department training built around each team’s real work. See every department.
Services for healthcare organizations
HIPAA Security Risk Analysis
The security risk analysis HIPAA requires, covering every system that holds health information, including AI tools.
AI Acceptable Use Policy
A clear, written policy that tells your people which AI tools they can use, for what work, and with what data.
AI Assurance Test
Our most thorough test: an AI system run against 100 or more realistic scenarios, with a signed assurance letter.
Enterprise AI Assistant Governance
A safe rollout of Microsoft 365 Copilot, ChatGPT Enterprise, or Gemini, from data access and permissions to staff rules.
Privacy Impact Assessment
A focused assessment of the privacy risks in one system or project, including AI systems, with specific safeguards.
Fractional Chief AI or Privacy Officer
A named senior executive who owns your AI governance or privacy program and reports to your leadership.
Guides for healthcare
AI Use Policy Guide for Behavioral Health Centers
What a behavioral health center’s AI use policy must cover, from HIPAA and 42 CFR Part 2 to state laws restricting AI in therapy.
AI Regulation Map for Behavioral Health Centers
The federal and state rules that govern AI in behavioral health, from HIPAA and 42 CFR Part 2 to state AI therapy laws, and what each one requires.
Talk through your AI and privacy questions
Tell us what you're working on, and we'll reply within one business day.