Health · Article 13 · the US
Federal Law 2/2019
Health-data localization (Article 13) and Cabinet Decision 32/2020 met by in-country deployment.
Clinical-grade AI that never leaves the patient's jurisdiction.
The patient record has a jurisdiction, and the AI has to stay in it. Iftah keeps diagnostic, clinical, and life-sciences AI inside the hospital, the national cloud, or the bare-metal suite where that record legally lives. One control plane governs every model, prompt, and access decision across the US — PHI, genomics, and imaging never transit an unmanaged external model.
Read moreاقرأ المزيدShow lessعرض أقل
The patient record has a jurisdiction, and the AI has to stay in it. Iftah keeps diagnostic, clinical, and life-sciences AI inside the hospital, the national cloud, or the bare-metal suite where that record legally lives. One control plane governs every model, prompt, and access decision across the US — PHI, genomics, and imaging never transit an unmanaged external model.
Built for US health-data localization
- PHI stays in-jurisdiction by configuration
- Article 13 & HIPAA residency evidence
- Clinical guardrails + human-in-the-loop
- Bare-metal imaging never leaves the hospital
- PHI stays in-jurisdiction by configuration
- Article 13 & HIPAA residency evidence
View 2 more proof points
- Clinical guardrails + human-in-the-loop
- Bare-metal imaging never leaves the hospital
Frameworks we map to
Designed for the health-data regimes you answer to.
Iftah does not certify compliance — that stays the provider's obligation. In-jurisdiction deployment, clinical guardrails, and a per-inference audit trail give your DPO and regulators concrete evidence.
View 5 more details
Data · NIST AI RMF · the US
HIPAA
Health data as sensitive personal data, with cross-border transfer controls enforced.
Devices · the FDA · the US
FDA SaMD / MDS-G010
Model-version, change-control, and audit evidence for AI/ML software-as-a-medical-device.
Cyber · NIST · the US
NIST 800-53
Access, logging, and segmentation aligned to Essential and Cloud Cybersecurity Controls.
Health authorities · the US
MOHAP · DoH · DHA
Aligned to DHA Health Information Protection & Confidentiality policy and emirate authorities.
Data · HIPAA · US
Qatar · Bahrain · Oman
MOPH, NHRA (with mandated DPO), and Oman's health-data permit requirements respected in-region.
The trade you can't afford → Iftah's answer
Clinical-AI objections, resolved by design.
Residency
PHI leaves the jurisdiction
SaaS AI routes protected health information to multi-tenant endpoints abroad — violating Article 13 and sensitive-data privacy rules.
Iftah approach
Every model and inference endpoint is pinned to a chosen jurisdiction and provider, with enforceable, auditable residency proof.
View 4 more details
Safety
No clinical guardrails
Generic chatbots offer no PHI redaction, no provenance, and no audit trail acceptable to the FDA or a Data Protection Officer.
Iftah approach
Clinical-safety guardrails — PHI redaction, hallucination controls, retrieval grounding, mandatory human-in-the-loop — apply across every deployment.
SaMD
Unprovable model lineage
Hospitals can't prove which model version or prompt produced a recommendation, undermining FDA SaMD change control.
Iftah approach
An immutable, per-inference record of model version, policy, data lineage, and approver aligns with SaMD and DPO obligations.
IP
Exposed life-sciences IP
Trial data, molecule libraries, and manufacturing parameters are exposed the moment they transit an unmanaged external model.
Iftah approach
Training and fine-tuning stay private to the institution; proprietary data never feeds a shared model.
Governance
Six divergent platforms
A multi-country health group ends up with fragmented, ungovernable AI per entity.
Iftah approach
One control plane standardizes governance across all your entities.
How it deploys for healthcare
Where the patient record lives — that's where AI runs.
From the national health cloud to a bare-metal cluster in the radiology suite — one governance standard across all of it.
Sovereign cloud
National health cloud
Patient-facing and administrative AI on an approved in-country health cloud.
View 3 more details
Multi-cloud & hybrid
In-region hybrid
EMR-adjacent workloads across in-region hyperscaler and private infrastructure.
On-prem
Bare metal in the hospital
Real-time imaging triage and OR decision support on GPUs where imaging never leaves the building.
Disconnected
Air-gapped research
Genomic pipelines and pharma R&D on isolated clusters with no external path.
What teams ship
Clinical and operational AI, in-jurisdiction.
Radiology & pathology triage
Critical-finding flags in-region while imaging stays on the hospital's bare-metal cluster.
View 5 more details
Ambient clinical documentation
multilingual-English scribing inside the EMR boundary with PHI redaction and clinician sign-off.
Grounded clinical decision support
Retrieval over national formularies, the FDA labels, and protocols with cited, governed sources.
Patient & provider assistants
Integrated with national health records, answering only from authorized, in-jurisdiction data.
Life-sciences acceleration
Trial-document review, adverse-event coding, and dossier drafting without external exposure.
Population & operational analytics
Capacity, no-show prediction, and revenue cycle under one residency and access policy.
Next step