Spectralgraph
Health systems

Certifications check the paperwork. We measure the model.

The Joint Commission's Responsible Use of AI in Healthcare guidance has health systems assembling governance evidence. Spectralgraph is an independent AI-testing laboratory, and a no-PHI vendor by design, that measures how the model your system hosts actually behaves.

FIXED PRICE · FIVE BUSINESS DAYS · NO MEETINGS, EVERYTHING IN WRITING · NO CUSTOMER DATA
The regulatory moment

RUAIH made AI governance a certification question. The model is still the open item.

Joint Commission guidance on responsible AI use, published with June 2026 certification pathways, asks health systems to show governance over the AI they deploy. Governance reviews and certification programs check that policies and oversight exist. The remaining question, the one a quality committee eventually asks out loud, is how the model itself behaves on your question types. That is a measurement question, and measurement is all we do.

It's not a checklist or a vendor questionnaire. What it does is measure the model itself, reading the model's own internal signals rather than grading its response output. Using your real question types on a model you host, it maps where the model fabricates, how often, and on which topics, down to specific flagged answers your team can verify with their own eyes. The deliverable is a signed, dated screening measurement built for your governance file. In testing so far it catches fabricated answers at about 0.85 AUC on models it has never seen before; that figure is provisional until the work is published.

What it needs from you

No PHI, ever. Nothing installed. Five business days.

Spectralgraph is a no-PHI vendor by design: the test needs representative question types and a model endpoint you designate, never patient data, so there is no BAA to negotiate. In scope are models your system hosts or controls, including private Azure OpenAI and AWS Bedrock deployments and internal fine-tunes. Epic-embedded and vendor-scribe AI that the vendor attests to is out of scope, and we say so up front.

For tribal health systems, the same posture serves data sovereignty: the measurement comes to your designated endpoint; your data goes nowhere.

Terms

Fixed fees, written engagement, nothing success-based.

Fees are fixed and never success-based: the LLM Validation Report is $9,500, Continuous Assurance is $6,500 per quarter for one model, and the pre-deployment Model Selection Study runs $4,500–$7,500 by candidate count. Full details and the founding client program are on the home page. Every engagement runs under a written agreement before any work begins.

Straight answers

Questions health compliance teams ask first

Do we need a BAA with you?
No, by design. Spectralgraph is a no-PHI vendor: the measurement never touches patient data, so there is no PHI to cover. We provide a written no-PHI statement for your vendor file instead.
How is this different from AI certification programs?
Certification programs like URAC's and CTA's do real work reviewing an organization's AI governance: policies, oversight, processes. What they do not do is measure the model. Spectralgraph is the other half: an independent measurement of how your specific model actually behaves, which is the evidence a certification file points to when someone asks what the testing showed.
We run Epic's AI and an ambient scribe. In scope?
Mostly no, and we will tell you plainly. Vendor-hosted AI that the vendor attests to is out of scope; there is nothing of yours to measure. In scope are models your system hosts or controls, including private Azure OpenAI or AWS Bedrock deployments and fine-tunes your teams have built.
What does the deliverable look like?
A signed, dated screening measurement: fabrication frequency mapped by topic across your real question types, with the confidently wrong answers that carry real weight in a clinical setting flagged individually so your clinicians can verify them with their own eyes.

Judge the deliverable before spending a dime.

Reply and we will send the sample validation report so your quality and compliance teams can see exactly what the certification file would hold.

Email the lab
REPLIES SAME DAY · EVERYTHING ANSWERED IN WRITING, ON THE RECORD