Clinical Summarization & Chart Review
C

Carta Healthcare

Carta Healthcare supplies software and clinical abstraction services for hospital registry teams. Lighthouse reads patient records and proposes answers to registry questions, with supporting passages and links to the original clinical documents. Abstractors inspect that evidence and confirm the answer while keeping the registry sponsor's coding instructions beside the question. The software works alongside existing submission tools, allowing hospitals to retain their current registry workflow.

Voyager provides the underlying ingestion and AI processing. It handles structured records and narrative documents, uses Anthropic Claude through AWS Bedrock, and connects through read only FHIR interfaces. Navigator turns registry information into analytics for quality improvement and research, while Atlas combines abstraction, workflow, and submission functions. Hospitals can license the technology for their own staff or purchase abstraction personnel as part of the service.

The broader service covers more than 30 registries, with clinical experts resolving ambiguous documentation and supporting quality control. Northern Arizona Healthcare uses Carta for cardiovascular registry work, while UNC Health supplies a Lighthouse user account. The commercial model can charge by case volume with implementation and support included. A current per case rate is not available before discussion, and the scope of software only deployments differs from the combined staffing and technology service.

AI Health Index verifiedOctober 14, 2026
Compare Carta Healthcare with other vendors
Founded
2017
Headquarters
San Francisco, California
Categories
clinical-summarization
Indexed Products
Lighthouse, Voyager, Navigator, Abstraction services
Buyer Segments
Hospital registry teams, Health system quality departments
Assessment

Capability Axes

An AI Health Index grade measures what a buyer can verify from public sources on the date shown. It is not a rating of how good the product is. A vendor can build an excellent system and grade low on an axis because it publishes nothing an outsider can check. How grades read

AI Capability
BB on AI CentralityThe model is the engine of a core module. The platform carries other value, but this capability does not exist without it.
Vendor Published

Lighthouse depends on learned models to interpret clinical records and suggest answers to registry questions. Its AI work includes reading narrative documentation, finding supporting passages, and connecting an answer to its clinical context. Voyager supplies the underlying ingestion and model orchestration, while experienced abstractors retain the final decision. Carta also sells abstraction personnel, Atlas workflow and submission functions, and Navigator analytics.

Those services give the wider business value beyond the model itself. A hospital can purchase technology for an existing abstraction team or combine it with Carta personnel, making the AI central to the software module without making every part of the offering an autonomous AI service.

BB on Autonomy and Oversight ModelThe oversight structure is described and one part is missing, commonly the threshold at which the system stops or what happens after it is wrong.
Vendor Published

An abstractor reviews each proposed registry answer with its justification, supporting chart excerpts, links to the full source documents, and the sponsor's coding instructions. The person confirms the answer and resolves ambiguous clinical documentation. Voyager uses read only EHR access and does not write changes into the patient record, which limits the actions the model can take in that system. This is a concrete review workflow with an identifiable decision maker.

Confidence thresholds that suppress a suggestion, mandatory escalation criteria, and a recovery procedure for an incorrect or omitted answer remain unspecified. Human review is established, while the rules governing uncertain cases are less clear.

BB on Model and Technology TransparencyThe approach or the suppliers are named without the version and update discipline behind them. Naming a supplier is the entry to this band both here and on Model Supply Chain Disclosure, which ask different questions of the same disclosure: who receives the data, and what produces the output.
Vendor Published

Anthropic Claude supplies the language model through AWS Bedrock. Voyager adds Carta technology for temporal reasoning, reducing unsupported answers, and linking suggestions to chart evidence. It ingests structured FHIR resources and unstructured clinical documents before producing answers for registry workflows. That identifies both a foundation model supplier and the clinical tasks around it.

The production Claude version, training or adaptation data used for Carta components, evaluation criteria for replacements, and update schedule remain unspecified. Weekly registry definition updates change the instructions used in abstraction, but do not establish when the underlying model changes or how a replacement is approved.

BB on Model Supply Chain DisclosureSubstantial partial disclosure, or a chain that is structurally short: an in house build, a cleared model that cannot be quietly swapped, or a deployment where the transfer does not occur at all. Naming the model provider exits the band below into this one; the axis rises from here on the completeness of the party list and on the terms that govern data once it arrives.
Vendor Published

Claude is supplied by Anthropic through AWS Bedrock rather than by a separately identified Carta foundation model. Carta adds proprietary clinical processing, and the hosted environment also uses AWS infrastructure for storage and operation. Customer data is barred from external model training and is technically separated from model vendors. This identifies the main model supplier and an important processing route.

A complete product subprocessor register, the precise information each party can access, and provider specific retention terms remain unavailable. The website privacy notice's examples of marketing and CRM providers do not establish the processor chain for hospital records.

CC on Clinical and Operational EvidenceNamed customers, or vendor reported percentages with no method, denominator or reference standard. Scale of use is recorded here and is not treated as evidence of benefit.
Vendor Published

UNC Health provides a Lighthouse user account, and a January 2026 case describes an experienced abstractor finding supporting information faster. Its example of 20 minutes saved concerns a hypothetical comparison with earlier work, rather than a measured current evaluation. Northern Arizona Healthcare's separate case follows a combined abstraction partnership from the third quarter of 2023 to the second quarter of 2024.

That project sampled at least 5% of monthly cases for inter-rater checks and improved a CathPCI documentation benchmark. It establishes experience with the service and process changes, but does not isolate the current Lighthouse model. A dated, reproducible evaluation of today's software alone remains unavailable.

BB on AI Safety and PHI StewardshipCategorical commitments are published, such as no training on customer data, without the retention schedule behind them.
Vendor Published

Hospital information is separated by customer, and Carta commits that it is not used to train external models. Voyager processes records through AWS Bedrock, with technical separation from model vendors and a dedicated customer environment. The workflow returns evidence to an abstractor for validation, rather than automatically changing the EHR.

These commitments address external training and some exposure risks, but the PHI retention period, deletion behavior, and deidentification rules remain unspecified. Claims about reducing hallucinations do not explain detection thresholds or testing. A defined response to an AI safety event, including investigation and correction of affected abstractions, is also unclear.

Regulatory and Compliance
CC on HIPAA and BAA PostureA status is stated but not supported: compliance is claimed, or business associate status stated, without the underlying document, including where the only privacy notice published covers the website rather than the service that handles patients. The mirror case grades here as well: a substantive privacy document that reaches the service, with no statement of business associate status anywhere and no scope position taken. One of the two elements the band above asks for is present, which is a grade below it and not a grade at the floor.
Vendor Published

Carta states that client PHI is governed by HIPAA and customer business associate agreements, and Voyager carries a commitment to BAAs with customers and vendors. The December 2025 privacy notice explicitly excludes the patient information handled through Atlas, Voyager, and Lighthouse. Its visitor rights, marketing data practices, and website service provider provisions therefore do not establish the terms for hospital records.

Dedicated customer environments and encryption address technical handling, but do not replace the agreement's legal scope. A readable customer BAA, its detailed subcontractor obligations, and substantive service privacy terms remain unavailable before contracting.

BB on Security Certifications and Trust CenterA recognized certification is named in the vendor own material without the artifact, or with a scope or renewal question the buyer has to raise. A recognized certification here is an audit of how the vendor operates security, such as SOC 2, HITRUST or ISO/IEC 27001. A certification has a scope and a clock, and both are part of this grade. A certification the vendor attaches to its data center, hosting facility or cloud provider, rather than presenting as its own, is the host's and does not count here.
Vendor Published

Voyager carries an annual independent SOC 2 audit claim alongside encryption and separation of customer data. Technical controls include AES-256 encryption at rest, TLS 1.2 or later in transit, dedicated AWS customer accounts, and monitored workloads. Those details describe protection of the hosted abstraction environment, while HIPAA BAAs address a separate set of customer and vendor responsibilities.

The SOC reporting type, current reporting period, auditor, full system scope, and route to obtain the report remain unspecified. Without the actual attestation, the audit claim cannot establish which components or model processing services are covered by the current examination.

CC on FDA and Regulatory StatusNo device claim is made and the product is scoped accordingly. Most administrative and operational products sit here and are not penalized for it, because this axis grades the appropriateness of the positioning rather than possession of a clearance.
Vendor Published

Lighthouse supports retrospective clinical registry abstraction by organizing existing documentation for a trained abstractor. Voyager reads records, and Atlas supports abstraction workflow and registry submission. Navigator uses the resulting data for quality improvement and research analytics. These functions are positioned as clinical data management, with human confirmation of registry answers, rather than an independent diagnostic or treatment decision system.

No medical device clearance is claimed for the current offering. Its HIPAA, security audit, and registry relationships address different responsibilities and do not establish FDA authorization for a future clinical use outside that stated scope.

CC on AI Governance and Bias DisclosureResponsible artificial intelligence is committed to in policy language with no evaluation behind it. Most of the index sits here.
Vendor Published

Clinical experts validate suggested answers and resolve ambiguity, while registry definitions reach Lighthouse through weekly updates informed by relationships with registry sponsors. The abstraction service also uses quality assurance processes; Northern Arizona Healthcare's earlier engagement included regular inter-rater checks, daily tracking, and weekly review of missing fields. Those practices govern registry work and documentation quality.

They do not establish the current model's performance across hospitals, demographic groups, specialties, or difficult record types. A defined model change approval process, comparative fairness evaluation, and release acceptance criteria remain unspecified. Earlier service quality results cannot establish governance of a newer model release.

CC on AI Liability and RecourseMechanisms exist that let someone challenge an output, such as audit trails, source traceability or review before commit, with nothing standing behind the output and no route for the harmed party.
Vendor Published

An abstractor can inspect the passages behind a suggested answer and open the original document before confirming a registry field. Registry coding instructions provide another reference for challenging the output, and the combined service adds clinical personnel and quality review. These mechanisms make an individual abstraction reviewable.

They do not establish an output accuracy warranty, compensation for an incorrect submission, or a contractual obligation to correct all affected records after a model error. Website privacy rights apply to visitor information and expressly exclude client PHI, so those rights are not a patient chart correction route through Carta's abstraction service.

Integration and Deployment
CC on EHR and Interoperability DepthIntegration is claimed through standards or a middleware layer with no system named and nothing to verify.
Vendor Published

Voyager connects through FHIR APIs using read only access. Supported resource types include Patient, Encounter, Observation, DocumentReference, Medication, Procedure, and Condition, giving the abstraction workflow both clinical data and document references. Prebuilt integration apps are offered, with a one day implementation claim that depends on hospital readiness.

The system does not modify or write information back to the EHR, and Lighthouse remains alongside existing registry submission tools. A named EHR tied to a current production Voyager connection is still unspecified. Fivos' separate Epic and Oracle Cerner integration examples establish that partner's capabilities, but do not by themselves prove a Carta deployment on those systems.

CC on Deployment Model and Data ResidencyA single hosted option with location implied rather than committed.
Vendor Published

Each hospital receives a dedicated AWS account, and the service uses a single tenant environment with encrypted storage and monitored workloads. Model processing runs through AWS Bedrock, while AWS EKS supports horizontal scaling. Disaster recovery can span regions, and managed service support operates under defined service levels. These details establish meaningful customer separation and infrastructure choices.

They do not identify the storage country, permitted inference regions, or the locations used for regional recovery. An on premises option and the complete cross border processing boundary remain unspecified, so customer isolation does not establish a commitment to a particular national residency.

Commercial
CC on Commercial TransparencyNo price is published and the posture is discoverable: a buyer can establish how the product is sold and what drives the cost before contacting the vendor. Most of the index sits here.
Third Party Estimated

Hospitals can license Lighthouse for their own abstractors or outsource part or all of abstraction to Carta personnel using the technology. In the Fivos distribution arrangement, charges scale with case volume and include implementation, training, maintenance, and support. That arrangement describes $0 upfront cost but does not give the per case amount.

A separate annual Fivos OpenPathways API subscription can also apply, so the technology and registry connection are distinct cost components. The purchasing structure is understandable before contact, while current volume bands, minimum commitments, and a complete price for a particular hospital remain unspecified. Savings percentages do not establish the subscription or service charge.

BB on Setting and Specialty CoverageCoverage is named with validation behind part of it.
Vendor Published

Hospital and health system registry teams are the principal users. The abstraction service covers more than 30 registries and combines clinical personnel with software for collecting and reviewing registry information. Northern Arizona Healthcare supplies a named cardiovascular example involving CathPCI fields, including pre-TIMI flow and post-stenosis documentation. UNC Health provides a current Lighthouse user account, supporting a hospital abstraction setting for that module.

Navigator extends the resulting information into quality improvement and research analytics. These examples establish parts of the intended coverage, while equivalent current software validation across all supported specialties, registry definitions, and source record types remains limited.

Commercial

Pricing

Vendor-published figures are labeled as such. Figures labeled “Estimated” are derived from third-party sources and have not been confirmed by the vendor.

Entry Price Pricing Basis BAA Tier Implementation Source
Custom quote
Per case software license or software with abstraction services Customer BAA; agreement terms not public Fivos describes implementation, training, maintenance and support as included in per case charges. Third Party Estimated

Fivos describes volume based pricing with no upfront charge. The per case rate is not stated.