Integral
Automates HIPAA Expert Determination, the statistical de-identification standard that governs whether a health dataset can lawfully be used for analytics, research, or model training. The platform detects and remediates PHI entities in structured and unstructured data, assesses re-identification risk, and produces a signed determination opinion from qualified statisticians, an approach the company describes as expert in the middle: automated analysis with human certifier sign off. Unlike Safe Harbor, which strips 18 fixed identifiers, Expert Determination is scoped per dataset and preserves more analytic utility. For AI training corpora the platform replaces real PHI with synthetic entities rather than redacting, so text remains natural for model training. Deploys inside the customer's VPC, on premises, or air gapped environment as container images. Originated in healthcare and is extending the same methodology to financial, consumer, and AI training data, which buyers should weigh when assessing healthcare specific depth.
Capability Axes
Automated detection and remediation of PHI entities across structured and unstructured data is what makes the product fast, and the synthetic entity substitution approach for training corpora is a model driven capability rather than rule based redaction. Held back from A because the deliverable a customer buys is a signed Expert Determination opinion from a qualified human statistician; the automation accelerates the assessment but does not replace the certifier.
This is the product, and the disclosure is correspondingly specific. The platform is built around HIPAA Expert Determination under 45 CFR 164.514(b)(1), supports differential privacy and k-map analysis rather than only Safe Harbor's 18 identifier list, produces a signed opinion documenting privacy model, remediation strategy, and risk justification that travels with the dataset, and reports measured rather than assumed utility retention. The company draws an unusually precise distinction between securing the container and assessing the contents.
HIPAA expertise is the core competency and the company operates against the Expert Determination standard directly, with determinations also aligned to Washington MHMDA, California CPRA, and applicable state law. Held back from A because the vendor's own BAA terms and execution process, as distinct from its customers' compliance posture, were not published.
Strongest deployment disclosure in the index. Deploys inside the customer's VPC, on premises data center, or air gapped environment as container images running the same core engine, so regulated data never leaves the customer network. For a product whose entire function is handling PHI, that architecture is the material fact.
No public pricing. Contact the vendor. Engagements are scoped per dataset and determination; no rate card published.
Pricing
Vendor-published figures are labeled as such. Figures labeled “Estimated” are derived from third-party sources and have not been confirmed by the vendor.
| Entry Price | Pricing Basis | BAA Tier | Implementation | Source |
|---|---|---|---|---|
|
Contact the vendor
|
Scoped per dataset and per Expert Determination engagement | — | — | Vendor Published |
Engagements are scoped per dataset and per determination rather than sold as a flat license, which matters because the unit of cost is the assessment, not the seat. No rate card published.