hipaa
(81)
ReleasePoint and the Art of Reading Between the Records
A medical record can tell you what happened without telling you what matters. ReleasePoint has built a business around closing that gap, one retrieved chart and one human check at a time.
Freshpaint puts healthcare ads back in the picture
When healthcare marketers pulled tracking pixels, they lost more than a privacy risk. Freshpaint gives them a controlled way to recover the signals that tell an ad where to go next.
The Company That Made Audit Season Boring
Meiran Galis spent years at EY watching startups treat security audits like a fire drill. Scytale is his bet that compliance can run in the background instead of eating a quarter.
The Software That Weaponizes a HIPAA Loophole Against the Records Department
Every personal injury case stalls in the same place: waiting on a records clerk who has no reason to hurry. Arctrieval turned a line of HIPAA regulation into a stopwatch that providers can't ignore.
Telehealth’s Biggest Risk Isn’t the Video Call
Patients expect the ease of a consumer app. Healthcare teams need the controls of a regulated system—and the real platform test is where context lives before anyone says hello.
Apten
Apten is a Y Combinator (S24) startup building omni-channel AI agents that engage and nurture leads across SMS, voice, email, and webchat. Aimed at B2C enterprises in home services, insurance, education, healthcare, and financial services, its agents hold one continuous memory across every channel, follow up at the right moment, transfer live calls to humans, and plug into CRMs like Salesforce and HubSpot. The company says its conversational approach converts previously dead leads into sales opportunities at a much higher rate than robocalls or static drip campaigns.
Beacon Health
Beacon Health is a Y Combinator (W26) startup building AI agents that operate real electronic health record systems the way a human employee would - clicking through Epic, athenahealth, and eClinicalWorks to close care gaps, capture risk adjustment codes, handle prior authorizations, and run preventative screening outreach. Aimed at primary care practices in value-based care arrangements, the product turns recorded EHR workflows into deployable agents so small practices can chase quality measures and shared-savings revenue without hiring more back-office staff. Founded in 2025 by Mark Pothen and Obinna Akahara, the company has gone live with an independent physician association covering roughly 40,000 patients.
Compliant LLM
Compliant LLM (formerly FiddleCube, YC W23) is an AI security and compliance toolkit that helps infosec, compliance, and GenAI teams keep their AI agents, prompts, and MCP servers secure. It red-teams AI systems against attacks like prompt injection and jailbreaking, checks them against frameworks such as NIST, ISO, OWASP, GDPR, and HIPAA, and monitors employee use of third-party GenAI tools to catch data leaks and PII exposure across both approved and shadow AI workflows.
Integuru
Integuru is a San Francisco startup (YC W24) building an AI agent that reverse-engineers the internal APIs behind websites and apps that have no official API, then generates fast, production-ready integration code. Instead of brittle browser automation, Integuru analyzes network requests and cookies to produce direct API calls that complete in about three seconds with 99.9%+ success. The open-source agent has over 4,700 GitHub stars, and the hosted managed service powers more than a million API calls a month per platform across healthcare, logistics, proptech, and legal.
Perspectives Health
Perspectives Health builds AI agents that take on the paperwork behind behavioral health care. Its software reviews patient charts every night, flags documentation that would trigger an insurance denial, writes clinical notes, and assembles utilization-review packets - so addiction and mental health programs get paid and clinicians spend less time on forms. Founded in 2024 and backed by Y Combinator's Summer 2025 batch, the company reports piloting across a dozen-plus clinics and reaching $250K in committed ARR within four weeks of launch.
Amperos Health
Amperos Health is a New York-based healthcare technology company building agentic AI that automates insurance denial management and revenue recovery for medical providers. Its AI biller, Amanda, works inside providers' existing billing systems to follow up on claims, place calls to payors, file appeals, and collect on denied and outstanding claims. Amperos serves more than 3,000 clinical locations across all 50 states and supports roughly $700 million in annual recovered revenue across 500,000+ claims. The company raised a $16M Series A led by Bessemer Venture Partners in April 2026, bringing total funding to about $20.2M.
Arya Health
Arya Health is a New York-based healthcare technology company building AI-powered digital agents that automate the non-clinical administrative work of distributed care - onboarding, scheduling, compliance, payroll, and hiring. Its agents plug into existing electronic medical records so home health and post-acute providers can spend more of every dollar on patients and caregivers instead of paperwork. Founded in 2022 by Kunal Sarda and Arunram Kalaiselvan, the company raised an $18.2M Series A in 2025 led by ACME Capital, bringing total funding to roughly $25M.
Briya
Briya is a healthcare data company that connects hospitals, health systems, and researchers to life sciences organizations through a secure, privacy-preserving data exchange network. Its blockchain-secured infrastructure standardizes electronic health records and keeps data at its source, while its flagship product, Briya AIRE, is a clinical-grade conversational AI research platform that lets scientists query and analyze real-world medical data in plain language. Founded in 2020 by David Lazerson and Guy Tish, Briya spans a global network of more than 120 million patient records and aims to accelerate medical and epidemiological research without the friction of traditional data integration.
Cassidy
Cassidy is a New York-based enterprise AI platform that lets non-technical teams build AI agents and multi-step automations powered by their own internal company data. By connecting large language models to a business's knowledge base, tools, and real-time data, Cassidy automates complex, context-heavy workflows - customer support triage, RFP responses, CRM updates from sales calls, lead qualification and internal knowledge sharing - without writing code. Founded in 2023 by Justin Fineberg and Ian Woodfill, the company raised a $10M Series A in 2025 and is used by more than 20,000 teams.
Castor
Castor is a health-technology company that builds a cloud-based eClinical platform for running clinical trials - from electronic data capture (EDC) and eConsent to eCOA/ePRO and real-world evidence. Founded in 2012 in Amsterdam by physician-researcher Dr. Derk Arts, Castor set out to replace clunky, expensive trial software with a self-service, researcher-friendly system. Today it supports more than 15,000 studies across 90+ countries and is used by leading CROs and biopharma companies, while pushing decentralized trials and practical AI (Castor Catalyst, built with Google Cloud) into mainstream research.
The Data Was Locked in a Vault. Subsalt Found a Way to Share It Without Opening the Door.
This Microsoft customer story details how healthcare technology startup Subsalt built a HIPAA-compliant synthetic data sandbox on Microsoft Azure and Microsoft Fabric to help medical researchers and students at UT Southwestern Medical Center access real-quality clinical data in days instead of months, accelerating research outcomes while safeguarding patient privacy.
Compyl
Compyl is a New York-based SaaS company that unifies governance, risk, and compliance (GRC) on a single platform. Founded in 2020 by former CISOs, it pulls evidence directly from more than 125 integrated systems, maps controls across 70+ frameworks like SOC 2, ISO 27001 and HIPAA, and uses agentic AI to draft evidence, score vendors and answer security questionnaires while keeping humans in control of decisions. Compyl raised a $12M Series A in June 2025 to scale its AI-led platform for mid-market and enterprise security teams.
Ethermed
Ethermed is a Philadelphia-based health technology company that uses large language models and clinical reasoning to automate prior authorization - the paperwork-heavy approval process between healthcare providers and insurers. Its platform intercepts physician orders, gathers documentation, compares payer guidelines, fills forms and submits requests with an audit trail, cutting approval times from days to minutes. Founded in 2021 by Dan Friedman and Michal Such, the company raised an $8.5M Series A in April 2026, bringing total funding above $15M.
Predoc
Predoc is a New York-based, clinician-founded startup building an AI-native platform for health information management. It automates the retrieval, cleaning, and structuring of patient medical records - pulling data from digital sources, faxes, and direct provider requests - and turns fragmented, unstructured documents into normalized, actionable data that plugs into existing clinical and research systems. Founded in 2022, the company raised $30M (Series A led by Base10 Partners) and serves oncology groups, research networks, and virtual care providers.
Thoropass
Thoropass is a New York-based compliance and audit company that pairs compliance-automation software with an in-house, tech-enabled CPA and security audit firm. Founded in 2019 as Laika and rebranded in 2023, it lets companies get and stay certified across 30+ frameworks - SOC 2, ISO 27001, HIPAA, PCI DSS, HITRUST, GDPR, and ISO 42001 for AI - through a single platform where the auditor is assigned on day one. By reusing evidence across frameworks and layering AI features like First Pass AI and Smart Sort AI on top of continuous control monitoring, Thoropass helps growing businesses complete audits meaningfully faster than the traditional consultant-plus-auditor route.
Chorology, Inc.
Chorology, Inc. is a San Jose-based data security and compliance startup that uses a Deep-AI 'knowledge encoding' engine - rather than conventional machine learning - to automatically discover, classify, and map an enterprise's sensitive data across structured and unstructured repositories. Its flagship platform, CAPE (Compliance and Posture Enforcer), aims to give organizations a continuous, mandate-agnostic view of where regulated data lives so they can enforce data security posture and meet frameworks like GDPR, CCPA, and HIPAA. Founded by serial cybersecurity entrepreneur Tarique Mustafa, the company emerged from stealth in July 2024 with $9M in funding and a roster of early Fortune 500 users.
Collectly
Collectly is a San Francisco-based healthcare fintech that automates the patient side of revenue cycle management. Its AI platform plugs into more than 20 EHR and practice-management systems to run digital billing, eligibility checks, cost estimates, payments and follow-up, so medical groups collect more, faster, with fewer staff hours. Founded in 2017 and a Y Combinator graduate, Collectly says it serves 3,000+ healthcare facilities and has processed over $1 billion in patient payments. In 2025 it launched Billie, a 24/7 AI agent that answers patient billing questions and takes action across voice, chat, text and email.
Lightbeam
Lightbeam is a San Jose-based data security and privacy company that converges DSPM, privacy operations, and AI governance into one identity-centric platform. Founded in 2020 by ex-Nutanix engineers, it uses AI to discover, classify, and map sensitive data across cloud, SaaS, and on-prem environments, tying each data fragment back to the human it belongs to. Customers in banking, healthcare, insurance, and tech use Lightbeam to automate compliance with GDPR, CCPA, HIPAA, and PCI while cutting data risk and controlling AI exposure through tools like Microsoft Copilot, ChatGPT Enterprise, and Google Gemini.
Vectara
Vectara is a Palo Alto-based enterprise AI company building a trusted, end-to-end platform for retrieval-augmented generation (RAG) and AI agents. Founded in 2022 by former Google AI researchers, it lets companies embed grounded, citation-backed GenAI - conversational assistants, semantic search, and agents - into their products while actively detecting and correcting hallucinations at runtime. Its stack includes the Boomerang embedding model, the RAG-tuned Mockingbird LLM, the open-source Hughes Hallucination Evaluation Model (HHEM), and a Guardian Agent layer, positioning Vectara as a leader in factual, secure, compliance-ready enterprise AI.
Zania
Zania builds autonomous AI agents for governance, risk, and compliance (GRC). Founded in 2023 by former CISO Shruti Gupta, the Palo Alto company deploys domain-specific 'AI teammates' that run third-party risk reviews, controls testing, evidence collection, security questionnaires, and continuous compliance across frameworks like SOC 2, ISO 27001, and HIPAA - work it claims runs up to 30x faster at 90% lower cost with 94%+ accuracy. It raised an $18M Series A led by NEA in 2025.
Shubh Sinha
Shubh Sinha is the co-founder and CEO of Integral Privacy Technologies, a San Francisco company that certifies, transforms, and activates privacy-regulated data (HIPAA, GDPR, CCPA) for healthcare and other regulated industries. Integral compresses compliance workflows that once took months into hours. Before Integral, Sinha led regulated-data product work at LiveRamp. He is a Purdue-trained computer engineer, an angel investor, and a Forbes Technology Council member. In July 2026 the company raised its Series A, bringing total funding to about $25M.
Zain Qayyum
Zain Qayyum is the co-founder and co-CEO of Medsender, a New York based healthcare automation company that uses AI to turn faxes, emails and phone calls into structured data that flows straight into patient records. A pre-med student who walked away from medicine after watching hospitals shuttle paper and CDs between systems, he built a platform now used by thousands of practices across all 50 states. In early 2025 Medsender raised a $5M Series A led by Ballast Point Ventures while already cash-positive, and the company debuted on the 2025 Inc. 5000 at #550.
Cake
Cake is a New York-based startup that bundles the sprawling open-source AI stack into a single managed platform, so companies - especially in regulated industries like finance, insurance and healthcare - can deploy AI inside their own cloud without wiring together 100+ tools by hand. Founded in 2022 by Misha Herscu and Skyler Thomas and launched from stealth in December 2024 with a $13M seed led by Google's Gradient Ventures, Cake handles the integration, security, governance and cost-monitoring glue around open-source components like LangChain, Ray, MLflow and vector databases, all deployed inside a customer's own VPC so data never leaves.
Century Health
Century Health is a New York-based health technology company that turns fragmented, messy electronic health record data into clean, structured, analysis-ready real-world evidence. Its AI-powered platform, CHARM (Century Health Abstraction & Retrieval Model), automates the curation, abstraction, and de-identification of clinical data to build disease-specific patient registries for pharmaceutical and life sciences research. Founded in 2023 by Vish Srivastava and Sanjay Hariharan, the company reports 97% accuracy against clinical expert judgment and raised a $5M seed round in 2026 led by Origin Ventures.
Clearpol Inc.
Clearpol is a San Francisco healthtech company that builds AI tools for post-acute and long-term care providers. Its platform reads a facility's clinical data and regulatory environment, then automates the paperwork nobody likes: drafting CMS Form 2567 Plans of Correction, flagging resident risk before it escalates, and answering questions about federal and state nursing-home regulations. Positioned as a compliance 'co-pilot' for skilled nursing facilities, Clearpol says it is trusted by 900+ long-term care facilities and has written thousands of Plans of Correction.