HIPAA & PHI for AI
Does Zero Data Retention Satisfy HIPAA, and What a BAA Covers That ZDR Does Not
Zero Data Retention alone doesn't satisfy HIPAA's full legal requirements for vendors.
Priya Venkatasubramanian9 min read
Gateway & Ground
AI Data Security
No BAA No Deal Why PHI Use Cases Require a Gateway That Will Sign
Patient data sent to AI models requires a signed BAA from every service in the data path.
Marcus Delgado-Wirth
· 9 min read
Changelog
HIPAA & PHI for AI
What Counts as PHI in an LLM Prompt and What Must Be Redacted Before a Model Provider Sees It
Organizations must redact patient data from LLM prompts before sending them to external providers.
Marcus Delgado-Wirth9 min read
AI Spend Management
The Tagging Architecture That Turns One Provider Invoice Into Team-Level AI Spend Clarity
Real-time cost tracking turns shared provider bills into actionable team spending data.
Søren Achebe9 min read
AI Data Security
Comparing Automatic PII Redaction Tools That Enforce Sanitization Before LLM Provider Submission
Seven criteria separate PII redaction tools that protect data before LLM submission.
Priya Venkatasubramanian9 min read
AI Infrastructure
Unified LLM Gateway Architecture for Enterprise Multi-Provider Standardization
One API enforces cost controls and security across multiple LLM providers.
Marcus Delgado-Wirth9 min read
AI Infrastructure
Fully Managed Multi-Provider LLM Routing for Teams With No DevOps Runway
Unified API access to multiple LLM providers without managing infrastructure yourself.
Tatiana Osei-Mensah8 min read
AI Data Security
AI Security Risk Management for Non-Engineering Stakeholders
Finance and security leaders need these infrastructure controls to govern AI risk.
Marcus Delgado-Wirth10 min read
AI Data Security
SSO and Identity Federation for Enterprise LLM Gateway Access
Federated identity ties every LLM request to a known user for automatic access control.
Søren Achebe10 min read
AI Data Security
Audit Logging Standards for AI Usage in Regulated Industries
Compliance auditors demand individual attribution in AI logs, and most deployments lack it.
Søren Achebe10 min read
AI Spend Management
Routing-Layer Telemetry as the Foundation for Per-Team LLM Spend Dashboards
Routing-layer telemetry enables real-time, granular LLM spend tracking by team.
Tatiana Osei-Mensah10 min read
AI Data Security
PHI Handling in AI Workflows and HIPAA Compliance Requirements
HIPAA compliance requires controls at every layer of an AI workflow, not just the model itself.
Priya Venkatasubramanian10 min read
