Industries · Healthcare

Patient data and models do not mix. Unless you govern every call.

Hospitals, clinics and health-tech companies run agents for triage, documentation and clinical decision support. TapPass makes sure patient data never reaches a model unprotected, and shows the trail to your DPO without a reconstruction project.

✓Free for one person · No credit card needed

Agent actions · liveward systems
08:10redactDischarge letter · name and MRN removed
08:22allowTriage agent · summarise symptoms for the nurse
08:35blockSymptom field tells the agent to ignore its rules
08:41holdTreatment suggestion · for the treating physician
08:58routeResearch query · kept on the self-hosted model
What you must proveon the record
GDPR Art. 9Special category dataevidence
EU AI ActHigh-risk medical AIevidence
MDRMedical device softwareevidence
GDPR Art. 17Right to erasureevidence
01What agents do in healthcare

Agents already sit next to patients. In triage, notes and research.

Three agents hospitals and health-tech teams run, and what TapPass watches on each.

Documentation agentDrafts letters and notes from the patient record.

Names, MRNs, ICD codes and medications are removed or tokenised, so the model never sees the real data.

Triage agentReads what patients type in a symptom form and suggests urgency.

Free text is scanned for injected instructions before the agent acts on it, and clinical decisions stay with a clinician.

Research assistantWorks over research data next to clinical data.

Session boundaries keep clinical and research context apart, so de-identified data stays de-identified.

02Where it goes wrong

Why healthcare AI needs a governance layer. Patient data has the highest protection.

Patient data is GDPR Art. 9 special category data. Agents in healthcare work in a regulatory minefield.

Patient data in promptsA documentation agent sends names, diagnoses and treatment plans to an external model. GDPR Art. 9 requires explicit consent and strict processing safeguards.GDPR Art. 9
No audit trail for clinical AIThe EU AI Act classifies medical AI as high-risk. You need a full log of every AI decision: what data went in and what came out.high-risk
Prompt injection in clinical toolsA patient types malicious text in a symptom field. The triage agent follows the injected instruction instead of analysing symptoms.injection
One patient’s history in another’s sessionAgents with shared context windows leak patient A’s history into patient B’s session. Without session isolation, there is no separation.session isolation
Health data leaving the EURouting patient data to a US-hosted model breaks GDPR transfer rules. Health data carries the highest protection level.transfers
Research and clinical data mixingAgents working over clinical and research data risk cross-contamination. De-identified data can become re-identifiable in a model’s context.re-identification
03The rules that matter

Clinical caution, as rules. Not as a policy document.

Your DPO, medical director and security team each say what must never happen. TapPass makes it a rule.

The DPO says“No patient identifier ever reaches a model.”
TapPass runsWHEN prompt contains patient data THEN tokenise names, MRNs, ICD codes RESTORE in the answer
What happensDocumentation agent drafts a discharge letterIdentifiers tokenised
04What TapPass does

Runtime governance for healthcare AI. Every patient data touchpoint.

Detect, block and record every model call and every tool call that touches patient data.

Patient data detectionDetects names, MRNs, ICD codes and medications, through dozens of obfuscation techniques, before data reaches a model. Block, redact or tokenise, so the model never sees real data.GDPR Art. 9tokenise
Logging for the EU AI ActA hash-chained record of every AI decision: classification, detections, data categories and timing. Exported to the hospital SOC through your SIEM.Art. 12Art. 14
Clinical safety rulesRules stop agents from making unsupported clinical claims or overriding human judgement. Clinical decisions wait for a person, and behavioural pacts keep each agent in scope.output scanning
Session isolationPer-patient session boundaries with taint tracking, so patient A’s data never reaches patient B’s session. Memory poisoning is detected.taint tracking
EU-only routingAll patient data goes to EU-hosted providers by classification, or TapPass runs self-hosted so no data leaves your network.EU onlyself-hosted
Erasure under Art. 17Cryptographic erasure with tombstones honours a patient’s right to erasure and keeps the audit chain intact, with signed erasure receipts and your own retention rules.GDPR Art. 17signed receipts
05Regulation

Article 9, Article 17 and the AI Act. In one record.

What each rule asks of you, and the part of the answer TapPass gives you.

RegulationWhat it asksWhat TapPass gives you
GDPR Art. 9Special category dataExplicit consent and strict safeguards when processing health data.Patient identifiers removed or tokenised before any model, by rule, with the redacted text on the record.
GDPR Art. 17Right to erasureErase a patient’s data on request.Cryptographic erasure with tombstones, a signed erasure receipt, and a hash chain that still verifies.
EU AI Act Art. 12Record keepingAutomatic logs for high-risk AI such as medical AI.Every AI decision on a tamper-evident record: what went in, what came out, which rule applied.
EU AI Act Art. 14Human oversightPeople who can oversee and stop the system.Clinical recommendations held for the treating clinician, signed with a passkey.
MDRMedical Device RegulationSafety and oversight for software used in clinical care.TapPass is not a medical device. It keeps a person on clinical decisions and records what the agent contributed, which supports the evidence in your own MDR file.

No feature guarantees a compliance outcome. TapPass gives you the controls and the evidence that make your own answer defensible.

06Proof

Proof you can check. Not logos you have to trust.

We do not put customer names on a page unless we can show you the work. Here is what you can verify yourself, on your own agents.

Free for one personWatch your own traffic

Connect one agent in watching mode. TapPass records what it would have allowed, held, redacted or blocked, and nothing is blocked while you learn.

ReplayReplay any decision

The same rule and the same call give the same verdict, every time. Replay a decision for your auditor, or a draft rule over last week’s traffic.

Trust CenterRead the paperwork

Security controls, subprocessors, and a DPA on request. Hosted in the EU, built in Belgium.

!
ISO 27001 certification is in progress. We do not hold SOC 2 or ISO 27001 yet.

What we can show you today is the product on your own agents, the documentation behind every control in the Trust Center, and a team that answers your security questionnaire itself.

Next: LegalPrivilege ends when client data hits a model. Unless something stops it.
Questions

Healthcare, in plain answers.

Something else on your mind? Talk to our team.

Does a model ever see patient names?

Not if your rules say so. Names, MRNs, ICD codes and medications are detected and removed or tokenised before the call leaves, and restored in the answer where needed.

Can we erase a patient’s data without breaking the audit trail?

Yes. TapPass uses cryptographic erasure with tombstones: the data is gone, you get a signed erasure receipt, and the hash chain is recomputed so the record still verifies.

Can an agent make a clinical decision on its own?

Only if you allow it. Clinical recommendations can be held for the treating physician, and outputs are scanned for unsupported medical claims.

Can TapPass run inside the hospital network?

Yes. On Enterprise, TapPass runs on your own servers, so no patient data leaves your network.

Patient data deserves more than a privacy policy. Govern every call that touches it.

Connect one agent and see every call TapPass would have held, stopped or routed elsewhere. Nothing is blocked while you learn.

✓ Free for one person✓ No credit cardBacked by Start it @KBCVLAIO✓ EU hosted✓ Built in Belgium✓ Your own model keys✓ Encrypted at rest and in transit✓ DPA on request