What is Anxya Health?

Anxya Health is a compliant-by-default agentic AI Platform-as-a-Service for the global healthcare and life-sciences ecosystem. It lets Payers, Providers, Pharma, Med-Device and Government/Regulatory teams build compliant software, run digital transformation and use a patient Digital Twin, with outputs curated against HIPAA, GxP, 21 CFR Part 11, GDPR, India DPDP and the EU AI Act.

Which compliance frameworks does Anxya Health support?

Anxya Health curates AI outputs against HIPAA, GxP, 21 CFR Part 11, GDPR, India's DPDP Act, GCP, ALCOA+ data integrity and the EU AI Act, and can assess your organization against SOC 2 and ISO/IEC 42001. Anxya Health itself holds no organizational certifications.

Anya Health

AI OS & PaaS for HCLS

Trust Center

Security, privacy & compliance

One place for enterprise healthcare & life-science buyers to review how Anxya Health protects data. We describe controls honestly: where something is aligned with a standard rather than certified, we say so. Anxya Health holds no third-party certifications or attestations today.

Security

Our control inventory, encryption, access control and vulnerability disclosure.

Sub-processors

The third-party providers that process data to run Anxya Health.

Privacy

What we collect, why, retention, your rights and our DPO/Grievance contacts.

DPA & BAA

Data Processing Agreement (GDPR Art 28 + DPDP) and HIPAA BAA for enterprises.

Terms

Master terms, disclaimers, liability, governing law and data ownership.

Cookie categories and how to control non-essential technologies.

Compliance framework matrix

Applicability and honest status. “Aligned” ≠ “certified”.

Framework	Applicability	Status	Limitation
GDPR / UK GDPR	Applicable (EEA/UK users & enterprise data)	Controls aligned; DPA available	No formal certification
India DPDP Act, 2023	Applicable (India-incorporated operator)	Controls aligned; Grievance Officer named	Not a certification regime
HIPAA (US)	Enterprise deployments handling PHI	BAA available for qualifying customers	Consumer use: not a covered entity
GxP / 21 CFR Part 11	Life-science customer workflows	Output alignment & assessment tooling	Anxya is not a validated system by itself
EU AI Act	AI features in scope	Transparency notices; informational-only outputs	No conformity assessment held
ISO/IEC 27001	Information security management	Practices reference the standard	NOT certified
SOC 2	Trust services criteria	Practices reference the criteria	NO SOC 2 report exists
ISO/IEC 42001	AI management system	AI governance practices referenced	NOT certified
NIST CSF / AI RMF	Security & AI risk management	Used as a reference framework	Reference only, no attestation

AI governance

• Uploaded documents and retrieved web content are treated as untrusted input; system instructions, user input, and retrieved content are kept separate.
• AI outputs are decision-support only — not medical, legal or regulatory determinations. A qualified professional is accountable for clinical/regulatory decisions.
• Least-privilege tooling for agents; documents sent to model providers are not used to train models per our sub-processor terms.
• EU AI Act transparency notices appear on health/AI features.

Report a vulnerability Download DPA & BAA (PDF)

Anxya Health is operated by Anxya Tech Private Limited (CIN: U62099PN2024PTC230490), Pune, Maharashtra, India. Security: security@anxya.health · Privacy: privacy@anxya.health

We use cookies to run Anxya Health and improve your experience. Choose how we may use them. Read our Cookie Policy, Privacy Policy and Terms.