FAQ

The questions buyers ask first.

Straight answers on what ANDR3W does, how we handle security and compliance, how we integrate, and how we engage. If your question is not here, ask us.

The platform

What exactly does ANDR3W do?
ANDR3W builds accountable AI workers that take on administrative and operational workflows for hospitals, health systems and group purchasing organizations. They work inside your existing systems, finish what they start, and bring a person in for anything that needs a human decision.
How is this different from a chatbot or a copilot?
A chatbot answers a question in a session and a copilot waits to be prompted. An ANDR3W worker owns a process, remembers what it learned, keeps its promises across days, and proves its work. Every answer is checked before it goes out, and every decision leaves a receipt.
Can we see why it did something?
Yes. Every decision writes a tamper-evident receipt showing what it understood, what it read, the math it did in code, which checks ran, what they caught and why the answer was allowed out. The explanation is read from that record, not made up after the fact.
What happens when it is not sure?
It asks instead of guessing. Every request ends in a named outcome: delivered, revised then delivered, asked back, or held with the reason stated. If a check could not run, the reply says so plainly.
What does ANDR3W not do?
It is not a medical device and is not for clinical diagnosis, treatment decisions or patient-facing medical advice. Our focus is administrative and operational work.
How do you keep people in control?
Consequential actions are held for the right person to approve, with a button right in the chat. You decide what runs on its own and what needs sign-off, and authority comes only from verified identity and recorded grants.

Security and compliance

Do you train models on our data?
No. We never train or fine-tune models on your data. It is used only to perform the work you direct, and it stays in your own isolated environment.
Where is our data hosted?
In your own dedicated cloud environment on US-region infrastructure, with its own network, key vault and backups, encrypted in transit and at rest.
Will you sign a BAA?
Where a deployment would have ANDR3W handle protected health information, we do so only under a Business Associate Agreement and only as that agreement permits.
Are you HIPAA compliant, SOC 2 or HITRUST certified?
We are precise about this because your risk team will check, and we never claim certifications we do not hold. The platform is designed around HIPAA Security Rule safeguards, we sign a BAA where we handle protected health information, and SOC 2 Type II and HITRUST are on our roadmap rather than complete.
Do you handle PHI?
Much of the operational work needs no patient data at all. Where a deployment does involve protected health information, it is processed only under a BAA, on BAA-covered infrastructure and model configurations.
How does ANDR3W fit our AI governance program?
Receipts, outcome records and continuous monitoring give your AI governance committee evidence it can review, in line with the NIST AI Risk Management Framework and the Joint Commission and CHAI guidance on responsible use of AI. We share a model card during security review.
Will you complete our security questionnaire?
Yes. We expect a full vendor security review and are glad to walk your security, compliance and IT teams through our architecture and controls.

Integration and getting started

What systems does it work with?
ANDR3W works in Slack, Microsoft Teams and email, and across Microsoft 365, Google Workspace, cloud drives, SQL databases, CRM and the web. Additional systems are connected per engagement through the same least-privilege, governed connections.
Do we have to replace anything?
No. ANDR3W works inside your existing systems of record and the channels your team already uses.
Which AI models does it use?
ANDR3W is model agnostic. Work moves across models and endpoints automatically if a provider has a bad day, and model upgrades are proven before they serve.
How does an engagement start?
With a briefing on your workflows. We scope a first high-value workflow together, your security team completes its review, we connect under least-privilege access, and ANDR3W runs the work under your oversight.

Still have questions?

Request a briefing and we will get your team the answers, including a full walk-through for security and procurement.

Request a briefing