The AI platform for health data sovereignty

It does a practice's record work with AI that runs on the practice's own computers: it reads a fax, a scan or handwriting into a typed record, transcribes a visit and drafts the note, and keeps the patient record, the mail it reads over IMAP, the appointments, the bills and the prescriptions. Nothing it reads leaves the computer it runs on.

It can be your EMR, or work beside the one you have: on the Practice plan, your systems and AI agents call it through endpoints. The API lets another system read a document into FHIR R4 or HL7 v2, find a patient, file a record, and see or book appointments; MCP gives an AI agent the same tools, so an agent already working in your EMR can do this work in Anastomo too, without the records passing through its conversation. The browser companion also puts a note you signed into the patient record open in your EMR, starting with OSCAR.

It can: the patient record, documents, mail, visits, each provider's schedule, bills and prescriptions are all here. What it does not do is submit anything on its own: you upload the OHIP claims file it writes, and a prescription is printed for you to sign and send. A practice that keeps its EMR uses whichever parts it wants.

Yes, on the Practice plan, through the practice's own server: an EMR, a billing system or an AI agent calls its tools with a key the practice issues to that system by name. Each tool is switched on for the practice's network, and separately for outside it, and every call is logged with the system's name.

Yes. One computer, or the practice's own server, holds the records; the others connect to it over the practice's network and keep none. Each keeps its own assistant, which works on the server's records through the same tools.

Yes, and where the processing happens is most of the question. PHIPA governs what a custodian may collect, use and disclose, and software that reads a record on the custodian's own machine and transmits nothing has made no disclosure. Ontario's Information and Privacy Commissioner published guidance on AI scribes in January 2026; read it before choosing any of these tools, including this one.

On the computer in front of you, against models downloaded once and kept on it. There is no inference server, no queue and no account. Unplug the network and all of it still works, which is the only version of this claim you can test.

Yes, over MCP, and the assistant never receives the records: every tool returns an opaque handle and a description of shape, never a value. If you choose a hosted model for the built-in assistant, it reads stand-ins for the names, card numbers and other identifiers in the patient record, put back on your computer — which lessens what leaves, and is still personal health information.

Yes, and Anastomo does not obtain it for you. The CPSO, the CMPA and the OMA all expect you to ask before recording, in language the patient understands. The app records that you asked and refuses to file a transcript that carries no attestation; the asking is yours.

It is deleted once the transcript exists, so there is no recording to request back later. The summary written from the transcript is a draft until you sign it, and nothing is filed to the patient record before you do.

It matches what the document says — health card, name, date of birth, phone, email, address — against every patient's details, including old cards and previous names, and trusts most what somebody checked. When two patients look alike it refuses to guess and asks you. Records that turn out to be one person are listed for you to merge.

Yes. Point it at a folder — exported mail in .eml, Apple Mail, Maildir or mbox, and scanned documents — and it files each thread and each document to the right patient, opening a record for anyone new. It keeps its place if you stop it, never files the same thing twice, and leaves anything it cannot place for you.

Wherever you choose — a drive plugged in, a network drive, another computer of yours — on every plan. Every file in a backup is encrypted, and it opens only with a recovery key made on your computer and never sent to us. We never hold a backup, so we cannot read one.

Nothing on one computer, backups and updates included. A practice with several computers or its own servers pays per provider for the support that takes: CA$20 a month for up to two providers, CA$10 a month for each after, and a year is ten months' price. Never per patient. The Practice plan is not on sale yet.

You are, and the software is built to keep it that way. Three acts are withheld from every AI assistant driving Anastomo: asserting consent, signing a note, and choosing where a file lands. Every filing is journalled in a hash chain nobody can quietly edit.

They are already on your disk, encrypted with a key kept in your computer's own secret store and not held by us. Any patient record exports as one file — a FHIR R4 bundle and a plain-text copy of every record, encrypted under a key the patient holds — so leaving is a file copy rather than a negotiation.