Agents are drafting discharge letters, reconciling medicines and answering patients. TraceMem ties each one to the clinician it works for, shows it only what its task needs, and holds anything sent to a patient or outside the hospital until that clinician signs.
Or call us on +1 650 550 1418
Ward 7B · Acute medicine
Works for
Dr Amara Okafor, consultant
Verified by Microsoft Entra ID
The model saw
Name, NHS number, diagnoses, procedures and medicines as tokens
Its task may read
Not in its view
Held for signatureThe letter goes outside the hospital, so it waits for Dr Okafor to sign.
Illustrative ward. Names, beds and times are made up; patients appear only as tokens.
Minimum necessary, enforced by the data product instead of trusted to the agent. Pick a task: the record lights only what that task may read, and a request for anything else is refused.
Governed Data AccessAs discharge-agent reads it: 5 of 9 sections
A task that does need mental health notes can be given them, and they reach the model obfuscated, which cannot be reversed. A genetic result can be set to stop the request altogether.
Illustrative record. The patient appears only as a token.
Some of these already apply and some are still coming. Between them they ask who reviewed what an AI produced, what it was allowed to see and what patients were told, and only a record kept at the time can answer.
Dates checked against each regulator’s own publication, September 2026. Not legal advice.
None of these involved an AI agent. Each was a system a hospital relied on, and each came down to who could see patient data, for what purpose, and whether anyone was checking.
Patient records were passed to a technology partner to test a clinical app, and patients were not adequately told how their data would be used.
What it came down to
Health data handed to a new system without a stated, limited purpose, or an impact assessment first.
For an agent, with TraceMem
Every agent read carries a declared purpose, and the model sees only what that task needs, as tokens.
Governed Data Access2018 · Dutch Data Protection Authority, 2019
€460,000
AP decision (opens in a new tab)Court ruling (opens in a new tab)
Staff with no care relationship looked at a well-known patient's record. A court later reduced the fine to €350,000.
What it came down to
No two-factor authentication on patient records, and access logs that were not regularly reviewed.
For an agent, with TraceMem
Every read is on the record with the clinician behind it, and a control that is switched on but seeing nothing is flagged.
Decision TraceRansomware came in through a customer account, disrupted NHS 111 and exposed the data of 79,404 people.
What it came down to
An account without multi-factor authentication, trusted with health systems.
For an agent, with TraceMem
Every agent action carries a clinician verified by your own directory, on every call, or it does not run.
Verified IdentityPut in your own numbers. What your agents read and sent before a governed path is in place can never be recorded afterwards.
21 working days a month. Your numbers stay in your browser.
In 6 months of waiting
100,800
Agent actions with no record of which clinician they worked for, what they read or who signed what they sent.
Pick whichever is quickest for you. However you get in touch, a person replies. With our forward-deployed engineers, TraceMem can be running inside your network in days.
Talk to us now
45days, free
Free for 45 days on our Docker-based trial image, inside your own network. When you are ready, it upgrades to the full enterprise product.
Forward-deployed engineers, ours or our partners', can set it up in days and help you define policies and integrations. This may be charged separately.