Hackforce provides SecureChat, a tokenization gateway that replaces PHI/PII with secure tokens before data is sent to any large language model, ensuring that sensitive information never leaves the organization. The platform logs every interaction with cryptographic signatures and offers forensic‑grade audit trails for HIPAA, GDPR, PCI‑DSS, and other regulations, while supporting on‑premise and cloud LLMs across desktop, mobile, and enterprise deployments.
Funding
Funding not disclosed
Founders
Product
Problem
Healthcare and other regulated industries cannot safely use generative AI because sending patient or personal data to external large language model providers risks HIPAA, GDPR, and other compliance violations, and existing enterprise AI plans still retain data or require costly Business Associate Agreements.
Solution
Hackforce offers SecureChat, a tokenization gateway that detects and replaces PHI/PII with secure tokens before any data leaves the organization. The tokens are processed by LLMs such as ChatGPT, Claude, or on‑premise models, so the AI never sees raw sensitive information. All interactions are logged with cryptographic signatures and can be exported to SIEM platforms, providing forensic‑grade audit trails for HIPAA, GDPR, PCI‑DSS, and other regulations. SecureChat can be deployed as a desktop/mobile app, on‑premise gateway, or Kubernetes‑based enterprise service, keeping the token vault entirely within the customer’s network and ensuring zero vendor data retention. The solution also includes real‑time policy enforcement, multi‑compliance modules, and optional on‑premise LLM support for air‑gapped environments.
Target Audience
Primary customers are hospitals, health systems, clinics, and other regulated enterprises that need to incorporate generative AI into clinical documentation, research, or billing workflows while maintaining strict data protection and audit requirements.
Features
- ML‑based detection of 18+ HIPAA identifiers with sub‑100 ms latency
- Secure tokenization and encrypted vault (AES‑256‑GCM, Argon2id, Ed25519) that never exposes raw data to external providers
- Compatibility with major LLM APIs (OpenAI, Anthropic, Google) and on‑premise models (Ollama, vLLM) for air‑gapped deployments
- Real‑time forensic audit logs signed with HMAC‑SHA256, exportable to Splunk, Sentinel, or other SIEM systems
- Deployment flexibility: desktop/mobile apps, Docker‑based gateway, or Kubernetes with HSM integration for large enterprises
- Built‑in compliance modules for HIPAA, GDPR, PCI‑DSS, NIS2, ISO 27001, and CCPA/CPRA, with BAA available at all tiers