Security and compliance
Healthcare AI agents: SOC 2, ISO 27001, GDPR and SSO
We checked 8 healthcare AI agents against their makers' own pages. 5 hold SOC 2, 1 hold ISO 27001, 1 state GDPR or offer a DPA and 4 offer SSO with no plan limit.
| Healthcare AI agents | SOC 2 | ISO 27001 | GDPR / DPA | SSO |
|---|---|---|---|---|
| AbridgeChecked | Not stated | Not stated | Not stated | Yes |
| AidocChecked | Yes | Not stated | Yes | Not stated |
| Anistratenco Health AssistantChecked | Not stated | Not stated | Not stated | Not stated |
| DeepScribeChecked | Not stated | Not stated | Not stated | Yes |
| Freed AIChecked | Yes | Not stated | Not stated | Partly |
| Hippocratic AIChecked | Yes | Not stated | Not stated | Not stated |
| NablaChecked | Yes | Yes | Not stated | Yes |
| SukiChecked | Yes | Not stated | Not stated | YesSuki for Partners |
"Checked" is the oldest answer in the row. "Not stated" means the maker's pages don't say either way.
- SOC 2
- Holds a SOC 2 report, Type I or Type II.
- ISO 27001
- Is certified to ISO/IEC 27001.
- GDPR / DPA
- States GDPR compliance or offers a data processing agreement.
- SSO
- Lets a team sign in through its own identity provider (SAML or OIDC), with the plan it comes on.
The "Partly" answers
Answers with a linked source
Each line links the maker's page these answers were read on.
Use the data
How we check listings: methodology.