CliniciansuseChatGPTanyway.
Nowit'slegal.
CareProxy is the AI gateway that ensures patient data never leaves the hospital — without blocking innovation.
Designed to support compliance with
Pilot partners · Danish enterprise
EU AI Act takes effect
2 August 2026 · Regulation (EU) 2024/1689
until
EU AI Act Art. 6 takes effect for high-risk AI systems.
What does the EU AI Act require?
From 2 August 2026, documenting and controlling high-risk AI systems in healthcare is a legal obligation — including any AI that handles patient data.
- Risk classification of all AI systems processing patient data
- Legal-grade audit log per AI request — available to the regulator on demand
- Technical documentation and ongoing monitoring of AI outputs
- Fail-safe mechanisms: AI must be interruptible at any time
How it works
One second. Automatic. Invisible to the clinician.
CareProxy analyses every request before it leaves the network. If it contains patient data, it's routed to your local model. If it's clean, it goes to the world's best cloud AI.
- Patient data never leaves the hospital
- Under one second per request
- No change to the clinician's workflow
62 requests · <1 sec · Treat Systems pilot, May 2026
For the CISO
Compliance you can prove — in real time.
Track every AI request live. See what was blocked, what went to cloud, and prove it all with one click when the regulator calls.
- Live overview of all AI traffic
- 100% of calls logged and auditable
- One-click forensic export for regulators
Requests today
14,205
Blocked locally
13%
To cloud
87%
Proof of evidence
Cryptographic proof — ready for the regulator.
Every decision is hash-chained and signed. The log can't be altered without breaking the chain. When the regulator comes, you have indisputable evidence — not a CSV file.
- Hash-chained, Ed25519-signed audit log
- Verifiable without contacting CareProxy
- Covers GDPR Art. 32, ISO 27001, NIS2
Ed25519-signed · immutable · one-click forensic export
Why CareProxy
The only one that does all four.
Healthcare detection: Danish CPR (mod-11), clinical lexicon, contextual re-identification. EU sovereignty: patient data never leaves the hospital's own network (not merely 'EU data residency' in a vendor cloud). Compliance audit: cryptographic hash-chained GDPR/EU AI Act evidence. No local AI required: Shield runs without your own GPU or model operation.
Ready to take control of your AI infrastructure?
CareProxy is under active development. Join the waitlist to be notified as soon as pilot installations open.
Or reach out directly kontakt@careproxy.dk