OpenHealth Agents is the open-source, HIPAA-compliant framework engineered for autonomous clinical workflows. Connect Claude, Gemini, OpenAI, or local models to Epic, Cerner, and FHIR R4 — guarded by an active Guardian Layer that eliminates hallucinations and scrubs PHI in real time.
Generic agent frameworks are dangerous in healthcare. OpenHealth Agents bridges the clinical trust gap with deterministic guardrails, zero-PHI transmission, and native FHIR interoperability.
An active perimeter wrapping every LLM call. Automatically redacts 18 HIPAA Safe Harbor identifiers, verifies clinical guidelines (CPGs), and executes dual-model hallucination criticism.
Agents think in standardized FHIR resources (Patient, Observation, Condition, Encounter). Pre-built SMART on FHIR connectors for Epic, Cerner, Medplum, and HAPI.
Deterministic clinical control flow. Manage multi-agent collaboration with stateful patient memory, cyclical reasoning loops, and automatic fallback procedures.
High-stakes medical actions (prescriptions, claims denials, therapy modifications) halt into a cryptographic "Pending Signature" state, requiring clinician approval to execute.
Every token, prompt, guideline check, and EHR mutation is cryptographically hashed with SHA-256 into an immutable append-only ledger for HIPAA & SOC2 compliance audits.
Apache 2.0 licensed. Run entirely inside your private cloud (AWS, Azure, GCP) or on-premise hardware via vLLM or Ollama. No patient data ever touches third-party commercial clouds.
Whether you are building healthcare software, deploying clinical agents into hospital workflows, or automating payer authorizations.
Build clinical applications with instant FHIR CRUD tools, typed Python schemas, and pre-configured safety guardrails right out of the box.
Deploy ambient scribe, clinical summary, and chart review agents without compromising patient privacy or clinical judgment.
Automate prior authorization extraction, claims adjudication checks, and coverage verification with tamper-evident audit logs.
How OpenHealth Agents isolates the reasoning brain from patient PHI and EHR systems using deterministic guardrails and cryptographic audits.
Exposes Model Context Protocol endpoints for Claude Desktop, ChatGPT, Gemini, and web apps.
Low-latency WebSocket audio pipe for ambient consultation and telemedicine transcription.
Streamlit & React-compatible interface for HITL approval requests and audit inspection.
Scans transcripts for 18 HIPAA identifiers using NER + regex and injects synthetic tokens before model inference.
Secondary validation agent cross-references proposed interventions against AHA, ADA, and NICE guidelines.
Circuit breaker that instantly halts unauthorized write mutations or black-box contraindications.
Multi-step cyclical graph coordinating provider, payer, and patient subagents.
Episodic longitudinal record retrieval with HIPAA-compliant encrypted embeddings.
Connects to Azure OpenAI HIPAA, AWS Bedrock, GCP Vertex AI, or local on-prem vLLM / Ollama.
Complete CRUD support for 60+ FHIR resource types with strict JSON schema validation.
SMART on FHIR OAuth 2.0 implementations for Epic, Oracle Health (Cerner), and Medplum.
Deterministic eGFR, CHA₂DS₂-VASc, MELD-Na, and drug-drug CYP450 interaction tables.
FastAPI FHIR R4 server + Streamable-HTTP FastMCP gateway. Exposes typed AI tools automatically.
Ready-to-deploy agents for clinical documentation, patient navigation, payer authorization, and clinical guideline oversight.
Captures doctor-patient audio, sanitizes PHI, generates structured SOAP documentation, and drafts FHIR Encounter resources with ICD-10 & CPT billing suggestions.
Empathetic, clinically bounded patient assistant for triage, pre-visit intake, medication reminder compliance, and scheduling follow-up visits via FHIR Appointment.
Evaluates clinical notes against payer coverage policies, extracts required lab indicators, and prepares Da Vinci CRD / PAS prior authorization requests automatically.
Dual-model verification agent. Inspects proposed drug orders, lab workups, and diagnoses against authoritative Clinical Practice Guidelines (CPGs) before execution.
Aggregates fragmented patient data across disparate EHR systems (Epic, Cerner, external labs) into a reconciled, deduplicated FHIR R4 episodic timeline.
Records each agent invocation into a verifiable hash tree ledger with actor attribution, token counts, model checkpoint ID, and deterministic execution logs.
Three simple steps to deploy sovereign, FHIR-native healthcare AI agents into your development stack.
Install OpenHealth Agents via pip or clone the repository directly from GitHub.
Connect your FHIR R4 sandbox (Epic, Cerner, or local HAPI) and private LLM endpoint.
Run the clinical ambient scribe with active Guardian PHI de-identification.
Generic agentic frameworks like LangChain, CrewAI, and AutoGen lack clinical guardrails, HIPAA compliance primitives, and native FHIR interoperability.
| Capability / Feature | OpenHealth Agents 🏥 | Generic Frameworks (LangChain, AutoGen) | Raw Foundation APIs (OpenAI, Anthropic) |
|---|---|---|---|
| Native HL7 FHIR R4 Primitives Built-in schemas for 60+ clinical resource types | ✓ Native & Validated | ✗ Requires manual parsing | ✗ Unstructured JSON strings |
| Active Guardian PHI De-identification 18 HIPAA Safe Harbor identifiers masked before LLM | ✓ Built-in Interceptor | ✗ No healthcare guardrails | ✗ Transmits raw tokens |
| Clinical Practice Guideline (CPG) Critic Validates orders against AHA/ADA/NICE medical standards | ✓ Dual-Agent Critic | ✗ No clinical checks | ✗ High hallucination risk |
| Human-in-the-Loop (HITL) Digital Signature Cryptographic lock on high-stakes clinical actions | ✓ Cryptographic Sign-off | ✗ Basic boolean prompts | ✗ Not available |
| Immutable Cryptographic Audit Trails SHA-256 Merkle chain recording every thought & tool call | ✓ HIPAA / SOC2 Ready | ✗ Ephemeral console logs | ✗ Proprietary provider logs |
| SMART on FHIR OAuth 2.0 Client Direct token refresh for Epic & Cerner integrations | ✓ Pre-built Connectors | ✗ Requires external auth code | ✗ Incompatible |
| 100% Sovereign On-Prem Deployment Runs inside hospital firewall with zero cloud leakage | ✓ Fully Sovereign | ✓ Self-hostable | ✗ Cloud SaaS only |
Start building for free with our open-source framework under Apache 2.0. Scale with private cloud VPC deployment and enterprise clinical support when ready.
Have questions about compliance, EHR integration, latency, or open-source licensing?
Join leading hospitals, healthcare AI engineers, and digital health startups building HIPAA-compliant, FHIR-native autonomous agents.