Built so that a clinician is never the thing that got optimised away.

The problem we started from

A clinician's time is spent in two ways: reasoning about a patient, and assembling the information needed to reason about them. The second has grown to consume the first. The data almost always exists — in a discharge summary, a lab portal, a referral letter, a folder the patient brought — and it is fragmented across systems that were never designed to be read together.

That is an information-logistics problem wearing the costume of a clinical one. It does not need a model that diagnoses. It needs the assembly done before the consultation starts, with every claim traceable to the document it came from.

The decision everything else follows from

A clinician reviews every output, and the review cannot be configured away.

This is not a caution we added late. It determines the architecture: there is no write path from a model to a patient record, no message channel a model can reach, and no setting that grants one. It also costs us things — CBS cannot promise the fully automated workflows a less careful competitor can, and a demonstration of CBS always has a person in it.

We think that trade is correct, and we would rather state it on the About page than have you discover it in the procurement call.

How it is built

Deliberately polyglot, with each layer in the language that suits its failure mode:

• Rust for encryption and the audit core. Field-level AES-256-GCM sits where a memory-safety bug would be a disclosure of patient records.
• Python for agent orchestration, the gateway and the compliance rule engine, where the rules change more often than the code around them.
• Go for batch data validation, where concurrency and a small deployment matter more than expressiveness.
• TypeScript for the tool servers that expose data to clients, where the type system is the contract.

The clinical application ships in nine languages — English, Hindi, Marathi, Telugu, Kannada, Tamil, Malayalam, Malay and Chinese — with script-aware typography, because a nurse station in Karnataka should not be reading a ward board in a second language with the matras clipped off the headings.

Where we are

CBS Health is pre-certification. It holds no independent security accreditation, is not a registered medical device in any jurisdiction, and has not been through a published prospective clinical validation study. The Responsible AI and Security pages set out what that means in specifics rather than in reassurance.