| What it does | Cryptographic identity and behavioral monitoring for AI agents in regulated industries
| Open-source FHIR server for AI-native health apps
|
|---|
| Stage | Startup
| Not given
|
|---|
| Founded | 2025
| Not given
|
|---|
| Based in | US
| Not given
|
|---|
| Pricing model | Free trial
| Freemium
|
|---|
| Pricing | Starter: $39/agent/month (minimum 5 agents, $195/month total); Professional: $99/agent/month (minimum 20 agents, $1,980/month total); Enterprise: custom pricing. 30-day free trial on all plans.
| Self-hosted: Free under Apache-2.0. Developer tier: $0/month (free hosted tenant, no credit card). Production: $1,500/month (signed BAA, 10,000,000 API points/day, 99.9% uptime SLA). Scale: From $6,000/month (50,000,000 API points/day, 99.95% uptime SLA).
|
|---|
| Key features | - X.509 certificate issuance via AWS KMS with private keys stored in HSM
- Real-time behavioral monitoring and drift detection across eight risk dimensions
- Content-risk scoring of agent outputs per EU AI Act Article 5
- Automatic certificate revocation when risk crosses 0.85 threshold within 60 seconds
- Compliance reports mapped to NIST AI RMF, NIST CSF 2.0, ISO 27001, MiCA, and EU AI Act
- Public verification endpoint with sub-500ms response and no authentication required
- OpenTelemetry (OTLP) export to Datadog, Grafana, Honeycomb, and Splunk
- RFC 8693 delegation chains and signed forensics
- Webhook event delivery with HMAC signatures and audit logging
- AgentMail: verifiable email inbox per certified agent for regulatory communication
| - FHIR R4 REST API with full CRUD operations
- OAuth 2.0 and OpenID Connect authentication
- Model Context Protocol endpoints for AI agents
- Attribute-based access control with FHIRPath
- SQL on FHIR analytics views
- Custom operations in TypeScript
- Multi-tenant support
- TOTP MFA and hardened authentication
- SDKs for TypeScript, Rust and React
|
|---|
| What makes it different | - Only platform that issues cryptographic identity to deployed agents, monitors behavior in real time, and generates compliance reports as one unified product
- X.509 certificates provide institutional trust standard used by banks and governments for 30+ years
- Auto-revocation with sub-60-second SLA stops misbehaving agents without manual intervention
- Content-risk scoring evaluates agent output language, not just actions, catching prompt injections and policy violations
- Private keys never accessible; stored only in AWS KMS with cryptographic signing performed by KMS directly
| - Normalizes data from Epic, Oracle Health, HL7v2 and any FHIR server into one API
- No feature gates: same open-source code in self-hosted and hosted versions
- Production-ready compliance: signed BAA, SOC 2 roadmap, pre-answered security questionnaire
|
|---|
| Free plan | Not given
| Not given
|
|---|
| Open source | Not given
| Not given
|
|---|
| Platforms | Not given
| Not given
|
|---|
| Public API | Not given
| Not given
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 40 ▼ −1 (down) since last check | 2 ● no change since last check |
|---|
| Trust Flow (Majestic) | 9 | 3 |
|---|
| Citation Flow (Majestic) | 30 | 22 |
|---|
| Referring domains (Majestic) | 258 | 13 |
|---|
Kakunin
Haste Health