25/09/2026
If you're building AI with patient data, you've probably had at least one of these questions.
“Can we use a commercial LLM with PHI?”
Yes, but the right agreements and data handling matter.
“Do we need to de-identify everything?”
Not necessarily. The goal is to minimize PHI to what the task actually needs.
“How do we prove compliance to a hospital?”
Clear audit logs, proper BAAs, and an architecture diagram that doesn't require a decoder ring.
These are questions we hear regularly from HealthTech teams.
So, let's make this simple.
Drop your HIPAA + AI question in the comments. We'll answer it - no pitch.