For health systems already running in AWS, Azure or Google Cloud.
Exalt Reserve
For health systems whose records and applications already run in a cloud account. Exalt Reserve puts open models, retrieval, agents and monitoring inside that account, and staff sign in through your own identity provider.
Where a health system starts.
Records and applications in the cloud
If your health system already runs in its own cloud account, Reserve deploys into that account instead of adding an Exalt-hosted service.
Cloud services under HIPAA
HHS has published guidance on how HIPAA applies when a covered entity stores or processes electronic patient information in a cloud service.HHS guidance on HIPAA and cloud computing
Risk analysis covers what you hold
The HIPAA Security Rule requires a covered entity to assess the risks to the electronic patient information it holds.45 CFR 164.308(a)(1)(ii)(A)
Your review
Your organization runs its own review and stays responsible for its conclusions.
Same question. Different access.
Two people ask Exalt Reserve the same question. Each answer comes only from the documents that person can read.
Signed in as a workforce planning lead
- A workforce planning lead asks: "Can we extend the travel nurse agency's contract past its current term?"
- The answer comes from the staffing agency agreement and cites it. The question, who asked and the source shown are recorded in the audit log.
- The citation opens the staffing agency agreement at "Extensions", with the passage highlighted.
Signed in as a charge nurse
- A charge nurse asks the same question.
- They cannot read the staffing agency agreement, so the answer never mentions it. It comes from the staff handbook, which says who to ask.
- The citation opens the staff handbook at "Agency staffing", and the audit log records the question, who asked and the one source shown.
Illustrative. A demonstration workspace, not a customer session.
What sits in your account.
- Models, retrieval, agents and monitoring run inside your own AWS, Azure or Google Cloud account. This is not an Exalt-hosted shared service.
- Open models self-hosted in your account are the default: Llama, Mistral, Qwen, Gemma and DeepSeek. Which models run, and whether a use case also uses an outside AI service, is decided with you.
- Reachable only from your private network, with no public endpoint. People sign in through your own identity provider.
- Data is encrypted at rest and in transit.
- Exalt runs a management plane outside your account. It holds no customer content.
- Two bills: Exalt's software, and your own cloud bill. You keep the data, models, vector stores, credentials and subscription.
- An audit log of questions, answers and admin actions is kept in your own cloud account, and your admin sets how long history is kept.
Start with the account you already run.
Bring the cloud account, the material you would put to work and the person who reviews your vendors. The consultation starts with those three.