Hathr AI

Hathr AI is a compliance workspace plus a compliance API middleware layer running inside AWS GovCloud, built on Claude via Amazon Bedrock rather than on a model of its own. It is not aimed at people chasing the newest models, but at healthcare, legal and government-contracting teams that cannot use AI until a BAA is signed.

Core capabilities

• Compliance workspace: chat, organization seats, subscription invoices, enterprise SSO callback and onboarding sit inside one multi-tenant application, and administrators can review token usage by member and by day and export it as CSV.
• Out-of-the-box RAG and OCR: uploaded documents become long-term memory, handwriting is readable, and the vendor claims a single pass can read roughly half a million words (the equivalent of fifty 10,000-word reports) with page-cited answers; projects expire automatically after twelve hours without use.
• A self-hosted /v1 API: S3 pre-signed uploads, an OCR state machine and RAG retrieval, with storage capped at forty thousand documents and embeddings at one thousand and twenty-four dimensions.
• Contract-level compliance: every account signs a BAA, data is restricted to the forty-eight contiguous US states, a DPA and SCC framework are in place, and zero data retention is claimed.
• Two pricing surfaces: the Webapp is $47 per user per month and is advertised as unlimited with no seat minimum, a BAA and a seven-day trial; the API has four tiers from $45 to $1,200 per month, billed separately.

Where it fits Independent clinics, mental-health and RCM teams, medical-malpractice lawyers, government contractors handling CUI, and software vendors that want to embed compliance capabilities into their own EHR. What they share is that they cannot use AI until a BAA is signed, and that the teams are usually under twenty people.

Distinctive strengths Compared with BastionGPT and Claude Enterprise, the difference is not the model: the GovCloud deployment can be verified in code, there is no seat threshold, the BAA is signed quickly, and the residency clause names the forty-eight states. The costs are a higher unit price, Claude as the only model, and no mobile app or AI scribe.

Editorial assessment The GovCloud deployment and the contract framework are real, but the compliance credentials currently rest mostly at the contract level: there is no publicly downloadable SOC 2 Type II, HITRUST or ISO 27001 report, the security page simply redirects to the privacy page, there is no public Trust Center, and third-party reviews have yet to be established. Due diligence should treat it as a contract-based vendor.