Companies / Health Universe
Health Universe provides a HIPAA- and SOC 2-compliant workspace where AI agents retrieve patient records and verify outputs. It serves specialty physician and oncology networks, diagnostic and ancillary providers, post-acute and senior care, condition-focused and navigation organizations, and academic and research organizations.
Summarized from its homepage on 4 Nov 2026.
Vendors of Health Universe and the evidence for each
CloudflareCloud and infrastructureLikely
Google WorkspaceProductivityLikely
Next.jsDeveloper toolsLikely
script: g.healthuniverse.com/_next/static/chunks/b4c6075196fba507.js?dpl=dpl_m93AQ11 Nov 2026Source
VercelCloud and infrastructureLikely
No public list found
We did not find a public subprocessor list. The company may still publish one, or share it privately.
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| HIPAACompany's statement | “Is Health Universe HIPAA compliant? Yes. Health Universe is HIPAA compliant and SOC 2 Type II, ONC Health IT certified, a TEFCA participant, and uses AES-256 encryption with immutable audit trails.”The company's own statement of compliance. There is no official HIPAA certification or registry. | 11 Nov 2026Source |
| SOC 2 Type IICompany's statement | “Health Universe is HIPAA compliant and SOC 2 Type II, ONC Health IT certified, a TEFCA participant, and uses AES-256 encryption with immutable audit trails.”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 11 Nov 2026Source |
We last read its homepage on 11 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Health Universe lacks it.
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Health Universe's full stack
Every vendor with its source and date, and an alert when Health Universe adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call