INDUSTRY 03·FOR CIO · CMIO · CHIEF DIGITAL · CISO

CLINICAL AI.
PHI-
SOVEREIGN.

Clinical AI lives or dies at the PHI boundary. XERJ is a self-hosted data plane that holds logs, embeddings, and agent memory inside a hospital VPC or a pharma research enclave — drop-in for existing Elasticsearch clients, auditable per query, HIPAA-BAA-ready on Enterprise tier.

PHI BOUNDARY·WHICH WORKLOAD LIVES WHERE

CLINICAL.
RESEARCH.

DOMAIN A · CLINICAL OPERATIONS · PHI · HOSPITAL VPC · HIPAA BAA SCOPE CLINICAL SOURCES Epic · Cerner · Meditech analytic extracts · HL7 · FHIR · device telemetry XERJ CLUSTER · 3-NODE HA · BAA-SCOPED BYOK via customer KMS · TLS 1.3 · per-tenant indices by service line every retrieval is a PHI-access audit event · replayable · exportable retention: encounter 7 y · audit 10 y · PHI tombstones tracked CLINICAL WORKLOADS ambient scribe · clinical decision support · care-gap detection · patient-portal copilot
DOMAIN B · RESEARCH & OPERATIONS · DE-IDENTIFIED · RESEARCH ENCLAVE RESEARCH SOURCES genomics · imaging metadata · publication corpus · trial registries DE-ID PIPELINE Safe-Harbor / Expert-Det. XERJ CLUSTER · 3-NODE HA · DE-IDENTIFIED + CONSENTED consent-tagged indices · right-to-withdraw via segment-level tombstone hybrid BM25 + kNN · SQ8 · float32 re-rank on top-K retention: research 10 y · trial lifecycle + regulatory minimums RESEARCH WORKLOADS researcher RAG · trial-matching · imaging similarity · cohort discovery
AMBIENT SCRIBE ENCOUNTER +
HISTORY
Encounter transcripts + patient history retrieved in real time. Hybrid keyword + vector against chart data. Agent memory per encounter. · hybrid keyword + vector
· in-session retrieval
· per-encounter audit
CLINICAL DECISION GUIDELINE +
POLICY
Retrieval at the order-entry moment. Latency inside EHR round-trip budget. Per-specialty RBAC.
PATIENT PORTAL PATIENT-
SCOPED
Patient-scoped agent retrieves from their own chart + approved KB. Session-isolated memory. Time-decay for recency.
RESEARCHER RAG PUBMED +
INTERNAL
PubMed mirror + internal corpus · hybrid retrieval for literature review. De-identified workspace. Re-embed on corpus refresh.
IMAGING RADIOLOGY
SIMILARITY
Radiology-image embeddings stored alongside metadata. Hybrid: keyword filter (modality / anatomy) + vector nearest neighbors.
REVENUE CYCLE CLAIMS ·
DENIALS
837/835 claim data · denial-reason clustering · retrieval-augmented appeal-letter generation.
COMPLIANCE·HIPAA & BEYOND

PHI-GRADE.
BY DEFAULT.

HIPAA · HITECHBAA on Enterprise tier · self-hosted inherits customer Security Rule postureBAA 2027
PHI ENCRYPTIONAES-256-GCM on segments + WAL · keys in external KMSBETA
BYOKCustomer-managed keys · no XERJ-side plaintext · rotation without downtimeROAD Q2
GDPR ART. 9Explicit consent · right to erasure · cross-border transfer controls · self-hosted in regionGA
HITRUST CSFInherits agency controls · commercial roadmap 2027ROAD 2027
FDA GOOD MLPer-query explain-plan aligns with change-control + audit-trail expectationsGA
SOC 2 TYPE IPlatform controls for SaaS offeringROAD Q3 2026
ISO 27001ISMS for platform engineeringROAD Q4 2026
MEASURED·INVISIBLE TO CLINICIANS

RETRIEVAL
CLINICIANS DON'T NOTICE.

METRICXERJLEGACY STACK
kNN retrieval · k=10 · p500.78 ms2.64 ms — 3.4×
Ambient-scribe lookupin-sessionmulti-hop plumbing
Vector memory · 10 M × 1.5 K18 GB (SQ8)92 GB (float32) — 5.1×
Recall @ 10 vs float32< 0.5 pp lossbaseline
Per-query PHI auditnative · explain-planapplication plumbing
PHI data egress0 · self-hostedvaries by vendor
PILOT · HEALTHCARE

PROVE IT
OUTSIDE PHI.

Two-week non-PHI pilot on PubMed-subset data. BAA conversation opens day one if Enterprise tier is in scope.

We reply within one business day · DOWNLOAD THE HEALTHCARE BRIEF (PDF) ✓ THANKS. WE WILL REACH OUT.