C8 Health

THE GRADE DESCRIBES THE MECHANISM, NOT THE QUALITY, and the company's own history is the cleanest evidence for it. C8 existed and spread across Swiss hospitals from 2019, before generative AI was available, as a structured protocol access tool. Strip C8 Panda AI today and a working product remains: a unified searchable knowledge base, role and department aware delivery, mobile access, adherence dashboards and a cross institution sharing network. That is the iFax and Connexall test applied honestly. It sits at B rather than C for two reasons. Panda AI is now the marketed centre of the product and the grounded retrieval architecture is a real engineering asset rather than a wrapper, and Smart Formats uses AI to restructure arbitrary uploaded documents into consistent navigable formats, which is a second genuine application. What the AI does NOT do is reason about a patient. It retrieves and summarises guidance a human institution authored.

The oversight property is structural rather than promised: because the assistant answers only from the institution's own approved corpus, it cannot surface guidance the institution has not sanctioned, and every answer is traceable to a named document and author. The clinician reads guidance and decides; nothing is actioned, ordered or suppressed. That is a materially safer posture than an open ended clinical question answering product. HELD AT B ON THREE ABSENCES. Nothing is published about behaviour when the corpus lacks an answer or contains conflicting protocols from different departments or sites, which is the realistic failure case in a multi site deployment. There is no dedicated clinical use and safety statement of the kind HealthLeap publishes in one findable place. And the microlearning framing, which encourages clinicians to keep refining questions until they have what they need, actively cultivates reliance on the assistant, which raises rather than lowers the bar for publishing what it does when it is wrong.

The ARCHITECTURE is described clearly and the constraint on it is the important part: Panda AI sources information EXCLUSIVELY from the institution's own vetted knowledge base, which bounds the answer space to content the hospital approved. ONE PROPERTY IS GENUINELY DISTINCTIVE AND WORTH REUSING AS A BENCHMARK: answers carry inline linked citations naming both the SOURCE DOCUMENT AND ITS AUTHOR. In a local corpus the author is a named colleague at the same institution, so the clinician can escalate to a person rather than to a document. That is a stronger accountability path than a citation to a journal, which is the usual best case in this index. THE GAPS ARE REAL AND ALL OF THEM CONCERN THE MODEL RATHER THAN THE PLUMBING: no model class, no foundation model named, no evaluation of any kind, no hallucination or accuracy rate, and nothing published about what the assistant does when the corpus does not contain the answer. That abstention question is the one this index most wants answered of a generative clinical product, and the Cytovale IntelliSep intermediate band remains the benchmark for answering it.

ONE GENUINE PEER REVIEWED PUBLICATION, and it is credited precisely for what it is. Windisch O, Zamberg I, Zanella M, Gayet-Ageron A, Blondon K, Schiffer E, Agoritsas T, Using mHealth to Increase the Reach of Local Guidance to Health Professionals as Part of an Institutional Response Plan to the COVID-19 Outbreak, JMIR Mhealth Uhealth 2020;8(8):e20025, doi 10.2196/20025. Geneva University Hospitals, more than 1,000 health professionals aligned on evolving COVID guidance. AUTHOR QUALITY IS A LEGITIMATE SIGNAL and it is high here: Thomas Agoritsas is a leading evidence based medicine methodologist and Angele Gayet-Ageron is a biostatistician, the same kind of marker recorded for Ewout Steyerberg on the Healthplus.ai record. BUT IT IS A USAGE ANALYSIS STUDY. It measures reach and adoption, not clinical outcomes, and it examines the pre commercial Geneva deployment. Everything else is vendor reported: ERAS compliance at MetroHealth rising 35 percent in five months and quoted elsewhere as roughly 65 to over 88 percent, perioperative glucose management at UTMB from about 72 to more than 81 percent in three months, 94 percent of clinicians consulting the platform for ERAS, over 90 percent adoption within six months, a 2x average increase in quality of care and a 3.4x increase in staff satisfaction with no definition of either measure. THE COMPLIANCE DELTAS ARE THE RIGHT KIND OF METRIC, because adherence is this product's actual failure mode, but none carries a denominator, a comparison period or a control. A published compliance study with a denominator would move this axis immediately.

A NEW AND REUSABLE ANSWER THIS INDEX HAS NOT SEEN BEFORE: the company states the platform is SOC 2, GDPR and HIPAA compliant WITHOUT REQUIRING PHI FOR DEPLOYMENT, and markets that a hospital can implement it without creating additional compliance risk. Nearly every vendor in this index answers the stewardship question with how well it protects patient data. This one answers that it does not need patient data at all, because the corpus is institutional knowledge rather than patient records. PHI MINIMISATION AS AN ARCHITECTURAL CHOICE IS A STRONGER ANSWER THAN ANY PROTECTION CLAIM, and it should become a standing check across the index: does this product need PHI, and if not, does the vendor say so plainly. HELD AT B RATHER THAN A ON TWO POINTS, both stated rather than implied. The quality improvement module tracks provider level compliance metrics that derive from patient care and identify individual clinicians, so the no PHI claim covers the knowledge platform more cleanly than the analytics layer, and the boundary is not drawn anywhere public. And a privacy policy and terms of use are published and linked but WERE NOT OPENED THIS PASS, recorded explicitly per the Droxi and Sickbay lesson.

HIPAA compliance is stated inside a multi framework posture rather than as a lone assertion: SOC 2 Type II, HIPAA, GDPR and CCPA together, backed by a public trust centre. That is meaningfully more than the bare HIPAA claim graded C on the AgileMD record and more than the silence common across this index. The architectural claim strengthens it further, since a platform that does not require PHI changes what a business associate agreement has to cover. STILL MISSING for A: no BAA terms, no tier, no execution path, no statement of which entity signs, and no subprocessor list, which matters for a cloud product serving hospitals on two continents.

AMONG THE BETTER SECURITY POSTURES IN THIS PEER GROUP AND IT ANSWERS THE QUESTION THIS INDEX ALWAYS ASKS. The company states compliance with SOC 2 TYPE II WITH THE TYPE EXPLICITLY SPECIFIED, alongside HIPAA, GDPR and CCPA. Specifying Type II rather than leaving SOC 2 ambiguous is exactly what earned Etiometry credit and exactly what AgileMD omits. A PUBLIC TRUST CENTRE EXISTS at trust.c8health.com, operated on Vanta, which is the artefact Etiometry lacks and which Birth Model was credited for. Two honest limits recorded rather than glossed: THE TRUST CENTRE CONTENTS COULD NOT BE ENUMERATED THIS PASS because the page renders client side, so the specific certifications, reports and controls listed there are unverified here and should be opened on refresh; and no ISO 27001, no HITRUST and no penetration testing statement was located in the material that was readable. GDPR and CCPA coverage is more than boilerplate given Swiss origin and stated operations across the United States and Europe.

No FDA clearance, none claimed, and none apparently required. The grade records the absence; the note records that the position is defensible and unusually clean. THE CLINICAL DECISION SUPPORT EXCLUSION ARGUMENT IS THE STRONGEST AVAILABLE TO ANY VENDOR IN THIS INDEX, stronger even than Luminare's, and for the same structural reason the Epic Sepsis Model's is the weakest. The exclusion turns on whether a clinician can independently review the BASIS for a recommendation. Here the basis is the institution's own published protocol, surfaced with an inline citation to the source document and its named author. A clinician can not only review the basis, they can open it and contact the person who wrote it. Recorded as an observation rather than a legal conclusion, and the company itself never makes the argument explicitly, so ask for its stated regulatory rationale directly.

Nothing published on retrieval performance, failure modes across content types, or whether the assistant surfaces some departments' protocols more reliably than others. No evaluation of any kind. THE MORE INTERESTING EXPOSURE IS NOVEL FOR THIS INDEX AND SITS IN THE KNOWLEDGE NETWORK, the cross institution sharing layer that lets hospitals and clinical societies copy each other's protocols. IF THE PROTOCOLS OF WELL RESOURCED ACADEMIC CENTRES BECOME THE TEMPLATE SMALLER HOSPITALS ADOPT, THE NETWORK QUIETLY STANDARDISES CARE ON THE PRACTICE PATTERNS AND RESOURCE ASSUMPTIONS OF THE BEST FUNDED INSTITUTIONS, whose patient populations, staffing ratios and available equipment differ from the adopting site's. A protocol that assumes resources a hospital does not have is not a best practice there. Nobody has asked this question of a knowledge sharing network and it should be asked of this one. A related governance question follows from the American Society of Anesthesiologists collaboration: when society guidance and a local protocol conflict inside the same corpus, which surfaces, who decides, and who owns the update cycle.

THE SHALLOWEST EHR INTEGRATION OF ANY RECORD IN THIS PEER GROUP, AND THE REASON IS DESIGN RATHER THAN NEGLECT, which the note states so the grade is not misread as a defect. Because the platform deliberately operates without PHI, it has no need for clinical data exchange, so there is no HL7 feed, no FHIR application and no SMART on FHIR launch described. What exists is access plumbing and adjacent system integration: EPIC IS NAMED, reached through IP based magic links inside the EMR that give login free access, plus stated integrations with scheduling systems, policy systems, analytics and learning management platforms. Naming Epic puts it ahead of several vendors in this index that name no EHR at all. It is graded C because the axis measures interoperability DEPTH and this is a launch and single sign on mechanism rather than data exchange. The buyer consequence is worth stating plainly and cuts both ways: nothing to build, nothing to break, and no patient context in the answer either, so the assistant cannot tailor guidance to the patient in front of the clinician.

PUBLISHES THE SHAPE OF AN IMPLEMENTATION, which is what earned Etiometry an A on this axis and which most vendors omit entirely: department wide implementation typically within three months including content migration and user training, a named C8 Implementation Specialist leading every deployment, an account manager who handles content upload and organisation, kickoff sessions for administrators, and a dedicated site manager providing ongoing analytics and expansion support, with no IT resources required for ongoing maintenance. Reported adoption is over 90 percent of clinicians within six months. Named customers are substantial and specific: Mount Sinai, UCSF Health, Brigham and Women's, MetroHealth, UTMB and Dartmouth Health, with the claim that seven of the top ten anesthesiology residency programs use the platform. TWO THINGS HOLD IT AT B. The install base count is inconsistent within the vendor's own material, with the About page meta description saying more than 100 hospitals while the body of the same page says 150 plus institutions, the bookkeeping check first recorded against Etiometry and now seen in three consecutive records. And no data residency statement exists at all despite stated operations across the United States and Europe and a Swiss origin, which is a real gap for a GDPR compliant vendor.

No pricing published at any level. No rate card, no unit of pricing, no band, no implementation fee, and all routes lead to a demo request or a sales line. SIXTH INSTANCE OF THE UPSIDE PUBLISHED PRICE GATED ASYMMETRY, and this one is the most carefully constructed version of it: the company headlines more than 550,000 dollars in average annual savings per tracked quality metric. IT DESERVES PARTIAL CREDIT FOR STATING THE BASIS, which most vendors do not, naming the mechanism as reduced surgical site infections and improved length of stay, the sample as two major academic medical centres with more than 20,000 combined cases, and the period as fiscal 2025 to 2026. IT THEN MARKS THE DERIVATION DATA ON FILE, so the figure remains unverifiable from outside. Stating your basis and withholding your data is a rung above asserting a number with nothing attached, and a rung below publishing it.

SCOPE IS NAMED RATHER THAN CLAIMED UNIVERSALLY, which this index credits. The product is anchored in ANESTHESIOLOGY AND PERIOPERATIVE SERVICES, which was the first vertical and remains the centre of gravity: the marketed solutions are C8 for Anesthesiology, C8 for Perioperative Services and C8 for Enterprises, the flagship use case is ERAS protocol compliance, the example assistant queries concern perioperative medication management such as when to stop SGLT2 agents or GLP-1 receptor agonists before surgery, and the company is an official collaborator of the American Society of Anesthesiologists. Secondary reach into resident onboarding and training is real enough to justify the workforce and training cross listing, with seven of the top ten anesthesiology residency programs claimed as users. Geography spans the United States and Europe, the latter following from the Geneva origin and continued Swiss deployment. Held at B because enterprise and system wide deployment is presented as the direction of travel rather than as evidenced breadth, and because every named outcome sits in the perioperative domain, so performance in departments outside that anchor is unestablished.