Hathr.AI Expands Enterprise HIPAA Compliance with SSO and SCIM Controls

Hathr.AI, a HIPAA-compliant AI platform for healthcare and other regulated industries, has expanded its enterprise deployment with new capabilities that include single sign-on (SSO), single sign-on (SCIM), and administrative controls. The deployment combines SAML 2.0 single sign-on, SCIM 2.0 provisioning, directory-based roles, managed organizational accounts, and an administrative panel for seats, users, sign-in events, and usage. An organization's existing identity directory controls who can enter Hathr.AI, what role each person holds, and when access ends.

The deployment is designed to provide secure access to Hathr.AI, a generative AI platform that connects secure generative AI to an organization's existing identity, access, and administrative controls. Staff authenticate through SAML 2.0 single sign-on using Microsoft Entra ID or Google Workspace. SCIM 2.0 allows the customer's directory to create, update, and deactivate accounts, while directory groups assign administrator and member roles. When an employee is offboarded in the organization's directory, the same process ends that employee's Hathr.AI access.

Administrators can review seats in use, users, and roles, authentication events, and organization-level usage. The sign-in audit log records authentication activity; it is not a log of prompts, outputs, or documents. Enterprise plans are priced per seat and can be billed by card or invoice. Current plan information is available on the Hathr.AI pricing page.

Hathr.AI combines HIPAA controls with FedRAMP High infrastructure and controls mapped to NIST 800-53 and NIST 800-171. The platform supports regulated workflows involving 42 CFR Part 2 data and records protected under 38 U.S.C. § 7332. A non-HIPAA API tier is available for non-PHI use; the BAA claim applies specifically to HIPAA-compliant plans. Developers can review the Hathr.AI HIPAA-compliant API.

Hathr.AI Enterprise supports medical record review, Medicare quality assurance, documentation review, medical coding and billing support, insurance appeals, policy analysis, and other regulated workflows. Its processing stack combines OCR, including handwriting recognition, retrieval-augmented generation across large document collections, and compliant tool calling for structured, multi-step work. Hathr.AI can process and store up to 100,000 pages of text in a single workflow. Its medical record review software can produce dated, cited chronologies, summaries, abstractions, and answers grounded in uploaded records.

Hathr.AI is HIPAA-compliant, with plans that include a signed Business Associate Agreement (BAA) and operate with safeguards designed for Protected Health Information (PHI). The platform combines HIPAA controls with FedRAMP High infrastructure and controls mapped to NIST 800-53 and NIST 800-171. The platform supports regulated workflows involving 42 CFR Part 2 data and records protected under 38 U.S.C. § 7332. A non-HIPAA API tier is available for non-PHI use; the BAA claim applies specifically to HIPAA-compliant plans. Developers can review the Hathr.AI HIPAA-compliant API.

Hathr.AI Enterprise puts secure Claude access behind the customer's own directory, so the organization controls every seat from onboarding through offboarding while sensitive data stays inside the compliant boundary. Hathr.AI is a HIPAA-compliant AI platform for healthcare and other regulated industries. It combines secure chat, large-document analysis, OCR, retrieval-augmented generation, compliant tool calling, API access, and enterprise automations. Every HIPAA-compliant plan includes a signed BAA, and customer data is never used for model training or product development.

Hathr.AI's deployment combines SAML 2.0 single sign-on, SCIM 2.0 provisioning, directory-based roles, managed organizational accounts, and an administrative panel for seats, users, sign-in events, and usage. An organization's existing identity directory controls who can enter Hathr.AI, what role each person holds, and when access ends. Hathr.AI runs Anthropic's Claude models on AWS GovCloud under FedRAMP High authorization. Every HIPAA-compliant Hathr.AI plan includes a signed Business Associate Agreement, and customer data is never used for model training or product development.

The deployment combines SAML 2.0 single sign-on, SCIM 2.0 provisioning, directory-based roles, managed organizational accounts, and an administrative panel for seats, users, sign-in events, and usage. An organization's existing identity directory controls who can enter Hathr.AI, what role each person holds, and when access ends. Hathr.AI runs Anthropic's Claude models on AWS GovCloud under FedRAMP High authorization. Every HIPAA-compliant Hathr.AI plan includes a signed Business Associate Agreement, and customer data is never used for model training or product development.

Hathr.AI Enterprise supports medical record review, Medicare quality assurance, documentation review, medical coding and billing support, insurance appeals, policy analysis, and other regulated workflows. Its processing stack combines OCR, including handwriting recognition, retrieval-augmented generation across large document collections, and compliant tool calling for structured, multi-step work. Hathr.AI can process and store up to 100,000 pages of text in a single workflow. Its medical record review software can produce dated, cited chronologies, summaries, abstractions, and answers grounded in uploaded records.

Hathr.AI is HIPAA-compliant, with plans that include a signed Business Associate Agreement (BAA)