Policy before provider
Each key carries its data classes and allowed models. PHI only reaches routes with a BAA and verified zero retention; anything else stops at the gateway.
The AI gateway for healthcare teams
An OpenAI-compatible API that sends patient data only to routes with a BAA and zero retention — and keeps an audit trail that leaves the conversation out.
Planned lineup. Each route is enabled for patient data only after its BAA and retention checks pass. Route status →
Drop-in
Point the OpenAI client you already use at the gateway. Streaming, tool calls and structured outputs work the way they do today — the gateway adds the controls around them.
Idempotency-Key for safe retriesfrom openai import OpenAI
client = OpenAI(
base_url="https://api.openai.com/v1",
base_url="https://gateway.accountablehq.com/v1",
api_key=os.environ["GATEWAY_API_KEY"],
max_retries=0, # retry with an Idempotency-Key instead
)
reply = client.chat.completions.create(
model="gpt-6-luna",
messages=[{"role": "user", "content": note}],
)
import OpenAI from "openai";
const client = new OpenAI({
baseURL: "https://api.openai.com/v1",
baseURL: "https://gateway.accountablehq.com/v1",
apiKey: process.env.GATEWAY_API_KEY,
maxRetries: 0, // retry with an Idempotency-Key instead
});
const reply = await client.chat.completions.create({
model: "gpt-6-luna",
messages: [{ role: "user", content: note }],
});
curl https://gateway.accountablehq.com/v1/chat/completions \
-H "Authorization: Bearer $GATEWAY_API_KEY" \
-H "Idempotency-Key: intake-2291" \
-H "Content-Type: application/json" \
-d '{
"model": "sandbox-chat",
"messages": [{"role": "user", "content": "Hello"}]
}'
sandbox-chat — free, simulated, no agreement needed.On every request
Each key carries its data classes and allowed models. PHI only reaches routes with a BAA and verified zero retention; anything else stops at the gateway.
Append-only and hash-chained, archived with signed checkpoints. It records who, what model and what it cost — never the conversation.
Funds are held for a request's maximum cost and settled to actual usage. No surprise invoices; auto-recharge if you want it.
Every key gets its own models, monthly limit and rate limit. A runaway job hits its ceiling, not your wallet.
Prompts and responses are never written to our database or logs. We keep the metadata you need for billing and audit — that's it.
Sandbox keys answer from a simulated model in-process. Ship the integration today; switch the key when your BAA is in place.
Models
Provider pricing per million tokens and published context windows. Gateway access limits may be lower. A model appears here only after it passes our own tests — and it's marked for patient data only once its route is covered.
No model is enabled for patient data yet. See every route and its readiness →
Getting started
Sign up and call sandbox-chat in minutes. No paperwork, no card.
Review and sign online — or email a one-time link to your authorized signer.
Prepay any amount. Turn on auto-recharge with a monthly cap.
Scope it to models, set a budget, and swap it into your app.
Pricing
You pay what the model costs plus a flat 15%. No platform fee, no minimum, no seats. Proposed launch pricing.
Launch review
Patient data stays off until every gate below is closed. Here's where each one stands today.
Updated October 2026. Your organization remains responsible for its own HIPAA obligations.
Questions
Not yet. The preview is for synthetic data. Patient data opens per route once the customer agreements are approved, the route's provider coverage and retention are verified, and the launch review is complete.
It is being built to support HIPAA-covered workflows, with a BAA, access controls, audit logging and zero-retention routes. No product makes you compliant on its own; your organization keeps its own obligations.
Prompt and response content — in our database, logs and audit trail. We keep account, billing, security and request metadata (model, tokens, cost, policy decision) to run and audit the service.
The offering is designed around one BAA with Accountable. We establish downstream coverage for the routes we offer for patient data.
No. Gateway is a standalone product with its own workspace and prepaid billing.