Astrata

Language processing is the engine of the core products, and one product stands without it. Chart Review performs NLP assisted abstraction for prospective HEDIS work, Constellation exposes the same text capability for risk adjustment and other chart based tasks, and outreach targeting applies it to surveillance. The technology page describes models built over almost two decades with NIH funding that expand HEDIS value sets with synonyms and misspellings, reason about temporal expressions, and judge whether a document closes a gap, qualifies as an exclusion or is only a lead. Remove those models and Chart Review reverts to manual abstraction.

The measure engine, eMeasure, is a digital HEDIS engine built natively on FHIR and CQL and certified by NCQA. It implements specified measure logic over structured data, which is standards engineering rather than inference, and it would still be sold with the language models removed. That is why this is not A: the platform carries value the models do not produce.

The review structure is laid out; the threshold behind it is not. Products are NLP assisted, not automated: the language models propose whether a chart closes a gap, qualifies as an exclusion or is a lead, and human abstractors decide. Astrata says it monitors accuracy by analyzing cases where a customer's abstractors disagree with the model, uses those disagreements to improve it, measures performance from measure development through tuning to production, and gives customers reports and tooling to see that accuracy and satisfy their own auditors. It reports that customers have had a 100 percent success rate with their NCQA auditors.

What is missing is the threshold. Nothing published says at what confidence a finding is presented as a hit rather than a lead, whether any finding is accepted without abstractor review, or what share of findings abstractors overturn. Without those, the review workload and the residual error cannot be sized.

The approach is described specifically and the update practice in outline; no model is identified and no figure is public. The technology page explains how the language processing works: it starts from HEDIS value sets and expands them with synonyms, brand names and common misspellings, reasons about temporal expressions (a colonoscopy three years ago can close a gap; a FIT DNA test needs a full date), and classifies each finding as a hit, exclusion, lead or gap. Each customer engagement includes a tuning phase in which the models are trained on the customer's own data, the customer's instance is updated each performance year for its measure selection, and accuracy is monitored through abstractor disagreements and measured from development through production.

No model or architecture is identified, the training data behind the base models is characterized only as two decades of NIH funded development, and no accuracy figure is published before contracting; customers receive reports after they sign. The company describes its accuracy as the best in the industry, with no public figure behind the comparison.

The model layer is built in house and the chain around it is partly named. Astrata's language processing is its own, developed over almost two decades with NIH funding and spun out of UPMC Enterprises in January 2021, with the first product built alongside UPMC Health Plan. No outside model provider appears in the chain as described, which makes the model layer structurally short. Named partners sit around it: Smile CDR for the FHIR data platform behind eMeasure's NCQA certification, and Ellkay for provider data integration.

What holds it below the top is the operating layer and the training terms. No hosting provider, subprocessor list or component inventory is published on the home, technology, pricing or privacy pages. Every engagement tunes the models on the customer's own data, and nothing states whether that tuning or the disagreement analysis improves models used for other customers, or what corpora trained the base models and under what consent.

Certification by the body that governs this domain, dated customer case studies, and an audit claim with no denominator.

The outside checks answer the question the product is sold on, which is whether its abstraction is accurate enough to be scored. Astrata earned the certified data partner designation in NCQA's Data Aggregator Validation program in June 2023, and describes itself as the only recipient for NLP assisted clinical document enrichment. eMeasure was among the first digital HEDIS engines NCQA certified, in July 2022. The company reports that its customers have had a 100 percent success rate with NCQA auditors, which is the test that decides everything in quality reporting, though no count of audits stands behind the figure.

Customer evidence is named and dated: case studies for CDPHP (2024 and 2025), AmeriHealth Caritas (2024) and UPMC (2022), with UPMC Health Plan the founding development partner. KLAS gave the company a K2 Peak award in 2024, a customer satisfaction measure. What keeps this below the top is that no peer reviewed evaluation of the product's abstraction accuracy is published, and the case study figures behind the claim that regional plans saved millions sit inside individual studies.

A specific statement about training use, without the retention schedule behind it. The technology page says every engagement includes a tuning phase in which Astrata trains its NLP on the customer's own data, and that it analyzes cases where the customer's abstractors disagree with the model and uses them to inform improvements. Customer charts, in other words, do reach model training. The company holds HITRUST r2 certification.

Everything around that statement is missing. No retention period for ingested charts or for the tuned models, no deletion process, and nothing on whether improvements informed by one customer's disagreements reach models used by others. The privacy policy covers the website, not the platform. For a company whose product reads complete clinical narrative at volume, that boundary between a customer's tuned model and the shared base model matters most.

A status is stated and not supported by a privacy document that reaches the platform. The home page describes the platform as HIPAA compliant, and the company holds HITRUST r2 certification. The privacy policy linked from the footer covers Astrata's websites and apps, not the clinical charts the platform ingests.

That matters here because the product's function is reading protected health information in its least redactable form: complete clinical narrative, at volume across a plan's membership. No business associate agreement, execution requirement, subcontractor position or retention period for ingested charts is published.

The architecture raises a further question. Constellation is described as fitting inside a customer's own enterprise data architecture, while other products are delivered as cloud services, and whether charts leave the customer's environment differs between the two with nothing published distinguishing them.

A recognized certification at its highest tier, named in the company's own announcements, with no artifact and a clock the buyer has to check. Astrata announced HITRUST risk based, two year (r2) certification in August 2022 and again in September 2024. The home page describes the platform as cloud based, HIPAA compliant and secure.

What holds it below the top is retrievability. No trust center, security page or report is available without asking, no scope statement says whether the certification covers the products or corporate systems, and no penetration testing statement or SOC 2 report is named. The September 2024 certification reaches its two year mark this month, so current standing is the first question.

The product makes no device claim and is scoped to match. Quality measurement software, NLP assisted abstraction and outreach targeting make no clinical claim about an individual patient and direct no treatment, and no clearance is claimed.

The regime that does bind the company is quality accreditation, and its engagement there is substantial: eMeasure's NCQA certification for digital measures, the NCQA Data Aggregator Validation certified data partner designation (June 2023), membership of NCQA's NLP working group, the president's role as co chair of NCQA's Industry Council (June 2025) and a seat on a National Quality Forum panel on AI in quality measures. Accreditation of this kind is context, not a regulatory pathway.

Outreach targeting ranks members for quality outreach by gap status, which is population health work rather than clinical triage.

Measurement governance that customers can see, and no fairness analysis at all.

The governance half is substantial and reaches B through the route written for material a customer's own reviewers use. Accuracy is measured at every stage from measure development through tuning to production, disagreements between abstractors and the model are analyzed and fed back, and customers receive reports and tooling to see that accuracy and satisfy their own auditors. The company's president co chairs NCQA's Industry Council and sits on a National Quality Forum panel on AI in quality measures, and NCQA's founder joined Astrata's board in February 2026.

The fairness half is absent. No performance by subgroup, bias testing or equity analysis appears on the home, technology or news pages.

The exposure is real for this modality. Notes vary in length and specificity by care setting and clinician workload, and under resourced settings produce thinner records. Language processing extracting quality evidence from thinner notes finds less, and the patients whose care is documented least thoroughly are disproportionately those already worst served, so a measure that under captures for them understates a plan's performance where improvement matters most.

No contractual allocation is published, and the customer is equipped to defend the output, which is the substance of the risk here.

The home, technology, pricing and privacy pages carry no service level agreement, accuracy warranty, indemnity or remediation position, and the fixed price model puts no fee at risk against a result.

The actual exposure in this domain is auditability rather than clinical harm, and auditability is addressed directly. A health plan's risk is that an abstraction it submitted is rejected by an auditor, costing it the rate and possibly its star rating. Astrata supplies accuracy reporting and audit tooling so the customer can meet its own auditing requirements, and reports that customers have had a 100 percent success rate with NCQA auditors. A customer therefore holds the evidence to defend a determination, which is a mechanism for challenging output with nothing standing behind it.

What that does not do is commit the vendor. If an abstraction is wrong and an audit fails, nothing published states what follows. The measure engine carries a separate exposure: certification attaches to specified measures at a point in time, specifications change every year, and nothing states what is warranted about continued conformance.

Standards named precisely, implemented natively and certified in that implementation, with no record system named. eMeasure is built natively on FHIR and CQL and was among the first digital HEDIS engines certified by NCQA, a certification announced in July 2022 with Smile CDR, a FHIR data platform company. NCQA certifies against the measure specifications and data model it defines, so the certification confirms the engine produces results the standard setter accepts. Astrata also partners with Ellkay on provider data integration and publishes a clinical data toolkit for provider integration, and its NLP is described as working across provider record systems and health information exchanges.

Even so, no record system vendor is named on the site, no two way integration is documented, and no marketplace listing appears.

Two deployment shapes are described and neither is specified.

The home page describes the platform as cloud based, secure, portable and extensible, and Constellation is described as fitting within a customer's existing enterprise data architecture. Those point at different arrangements, one hosted by the vendor and one embedded in the customer's environment, and the difference determines where protected health information sits. The technology page says the language processing was designed for modern scalable cloud infrastructure and can process hundreds of millions of documents.

Everything specific is absent. No cloud or hosting provider, region, residency commitment, tenancy model or continuity position is published on the home, technology, pricing or privacy pages.

Tenancy matters because the customers are health plans whose membership data and quality performance are commercially sensitive to one another. Continuity is lower risk than for a clinical product, since quality reporting runs to an annual cycle, though the company's own case for year round prospective abstraction narrows that slack.

No price is published, and the pricing model is published in unusual detail on a pricing page linked from the home navigation. Astrata sells a fixed price SaaS subscription: a one time set up fee plus a recurring fixed fee covering one HEDIS performance year (typically February to January), with new capabilities included as released. The recurring charge depends on three things, in order of weight: the number and complexity of measures selected, the members in the included denominators, and the number and heterogeneity of data integrations. Users, abstractors and chart or document volume do not change the price, and the page says most organizations use 5 to 12 sub measures on targeted lines of business.

What a buyer cannot do is size it. No rate per measure, member band or integration is given, and pricing comes as a proposal after contact. Readiness assessments are offered as a separate product with no price stated.

Deliberately narrow coverage, named clearly, with outside validation behind part of it. The buyers are health plans and accountable care organizations, and the function is quality measurement and adjacent chart based work: year round prospective HEDIS abstraction, digital measure computation, surveillance and outreach targeting, and a text platform for risk adjustment. The pricing page adds that organizations typically run 5 to 12 sub measures on targeted lines of business.

Part of that coverage is validated from outside. NCQA has certified the digital measure engine and designated Astrata a certified data partner for NLP assisted clinical document enrichment, and named health plans have published case studies (CDPHP, AmeriHealth Caritas, UPMC). The Association for Community Affiliated Plans named it a preferred vendor in July 2025, which reaches Medicaid focused plans.

The constraints are structural: the whole product is built around the United States quality measurement framework and its digital transition, so it has no application outside that setting. What is not published is depth of adoption: no customer count, covered lives or current list of certified measures beyond the two named at the engine's first certification.