Clinical AI without losing custody of patient data.
Healthcare has the strictest rules on where data lives and who may read it, and the fastest-growing set of AI tools. Agentu gives a practice, a hospital or a health-tech product one encrypted memory, separated per practice and per purpose, in the country the law requires — so clinicians can use the models they trust while the organisation keeps custody of every record.
Four obligations, four controls
Minimum necessary, enforced by keys
Each practice, department and purpose — triage, documentation, billing, research — is a separately keyed category. A model used for discharge summaries cannot read the research cohort. The minimum-necessary principle becomes a property of the key rather than a training slide.
The strictest model terms by default
Health categories are connected only to providers under business terms that forbid training, with zero-data-retention routes where the provider offers them, and nothing is ever stored by Agentu in the clear. The model-terms schedule in the agreement states the position for every provider you use. What models may keep →
In-country where the law says so
Health data is the category most often required to stay in-country: Texas and Florida patient records in the US; French health hosting in the EEA; UAE and Saudi health data in-country. The US region (in build) serves US patient data; the EU region serves French HDS-scope data; where no region satisfies a rule we say "not served" rather than stretch. Data residency →
Access control, audit and breach readiness
Keys are issued per person, per system and per purpose and revoked in a second; the audit log records every use without content; and an incident on one key cannot reach data sealed under another. Breach notification to you is prompt enough to meet HIPAA and GDPR timelines.
HIPAA, GDPR and the rest
HIPAA (US)
Agentu is built to act as a business associate: encryption at rest and in transit, unique access credentials, audit controls, integrity protection through signed chains, and breach notification. Business associate agreements will be offered on the Enterprise plan once the US region is live.
GDPR and UK GDPR
Health data is a special category: Agentu processes it only on your instructions under an Article 28 agreement, inside the region, with erasure by key destruction and no transfer for storage. Connected models are covered by standard clauses and transfer-impact assessments.
Sector rules
French HDS hosting, German §393 SGB V, Australia's My Health Record, UAE and Saudi health-data localisation each have specific requirements; the residency page says which the regions satisfy today and which they do not.
What is live and what is not
| Capability | Status |
|---|---|
| Encrypted, categorised memory with per-model keys, signed history, export and crypto-shredding | Live |
| Connectors for Claude, ChatGPT, Perplexity, Gemini and MCP-capable clinical tools | Live |
| Swiss home (AWS Zurich) | Live |
| Agentu Professional: practice, department and purpose structure; several AIs on one purpose at the same time; admin portal; offboarding | In build |
| Regional home in the US (HIPAA, state rules), then Singapore | In build |
| HIPAA business associate agreement (Enterprise) | With the US region |
| SOC 2 Type II, ISO 27001, HDS or C5 certification | Planned · not held |
| Cyber and professional cover for Professional and Enterprise plans | Being arranged |
Agentu is infrastructure for your clinicians' tools; it is not a medical device and does not make clinical decisions. This page describes the product, not advice on your own obligations.