# Healthcare AI agents: SOC 2, ISO 27001, GDPR and SSO

We checked 8 healthcare AI agents against their makers' own pages. 5 hold SOC 2, 1 hold ISO 27001, 1 state GDPR or offer a DPA and 4 offer SSO with no plan limit.

| Product | SOC 2 | ISO 27001 | GDPR / DPA | SSO | Checked |
| --- | --- | --- | --- | --- | --- |
| [Abridge](https://agentsindex.ai/abridge) | Not stated | Not stated | Not stated | Yes | 2026-11-03 |
| [Aidoc](https://agentsindex.ai/aidoc) | Yes | Not stated | Yes | Not stated | 2026-10-19 |
| [Anistratenco Health Assistant](https://agentsindex.ai/anistratenco) | Not stated | Not stated | Not stated | Not stated | 2026-11-04 |
| [DeepScribe](https://agentsindex.ai/deepscribe) | Not stated | Not stated | Not stated | Yes | 2026-11-01 |
| [Freed AI](https://agentsindex.ai/freed-ai) | Yes | Not stated | Not stated | Partly | 2026-11-05 |
| [Hippocratic AI](https://agentsindex.ai/hippocratic-ai) | Yes | Not stated | Not stated | Not stated | 2026-11-08 |
| [Nabla](https://agentsindex.ai/nabla) | Yes | Yes | Not stated | Yes | 2026-10-20 |
| [Suki](https://agentsindex.ai/suki-ai) | Yes | Not stated | Not stated | Yes (Suki for Partners) | 2026-10-31 |

"Checked" is the oldest answer in the row. "Not stated" means the maker's pages don't say either way.

- **SOC 2**: Holds a SOC 2 report, Type I or Type II.
- **ISO 27001**: Is certified to ISO/IEC 27001.
- **GDPR / DPA**: States GDPR compliance or offers a data processing agreement.
- **SSO**: Lets a team sign in through its own identity provider (SAML or OIDC), with the plan it comes on.

## The "Partly" answers

- **Freed AI, SSO**: Single sign-on on some plans ([source](https://www.getfreed.ai/security), 2026-11-05)

## Answers with a linked source

Each line links the maker's page these answers were read on.

- **Freed AI**: SOC 2 Type 2 ([source](https://www.getfreed.ai/security), 2026-11-05)

How we check listings: [methodology](https://agentsindex.ai/methodology).

Source: AgentsIndex, https://agentsindex.ai/data/healthcare-ai-agents-security