Fleak joins the Databricks startup accelerator. See the announcement

Healthcare data, protected before it moves.

Fleak normalizes EHR audit logs, medical device telemetry, and security logs in real time, masks PHI before it reaches any destination, and keeps clinical systems observable. HIPAA retention lands in your own storage.

  • EHR audit logs
  • Medical devices
  • PHI masking
  • FHIR
  • DICOM
  • HIPAA retention

30–50%

SOC spend reduction

every log routed to where its job gets done

6mo → 1wk

Time to onboard a source

including clinical systems nobody has parsed before

0

AI inference on patient data

the Brain sees samples, never live records

Patient data shows up
in places nobody planned for.

Clinical applications, devices, and identity systems all log differently, and many of them log more patient detail than anyone intended.

PHI in operational logs

Names, medical record numbers, and dates of birth turn up in application and error logs, then get copied into every downstream tool.

Devices nobody inventoried

Connected medical devices go silent or noisy and nobody notices until a clinical workflow breaks.

Every system, its own format

EHR, imaging, lab, and identity systems each log in their own shape, so privacy monitoring means correlating them by hand.

Clinical and security data,
one governed fabric.

Fleak normalizes every source, masks PHI upstream, and routes each record to the team that needs it, inside your environment.

PHI masked in flight

Names, medical record numbers, SSNs, and dates of birth are masked or hashed before any destination receives the record, including at the edge.

EHR access monitoring

EHR audit trails are normalized into one schema, so privacy and insider-threat rules work across every application.

Medical device visibility

Collect device telemetry, flag devices that go silent or noisy, and enrich each one with its owner, location, and known vulnerabilities.

FHIR and DICOM aware

Normalize clinical formats such as FHIR, HL7, and DICOM metadata alongside security logs in OCSF.

Clinical systems kept up

Monitor the pipelines behind patient portals and telehealth, and get alerted before a gap reaches a clinician.

HIPAA retention at storage prices

Keep audit records for six years in your own object storage, and replay any slice when an investigation needs it.

Routed by purpose

Detections go to the SIEM, access events to privacy monitoring, de-identified data to research, and full fidelity to the archive.

Inside your environment

Run Fleak in your cloud, on-prem, or air-gapped. Patient records are processed by a deterministic engine and never sent to an AI model.

Ready for clinical AI

De-identified, normalized data gives AI agents and analytics a consistent, safe foundation.

Mask PHI once, upstream.

Every system downstream gets the context it needs and none of the identifiers it shouldn't have.

The Brain plans.
The Muscle protects.

The Brain maps each clinical and security source to one schema. The Muscle masks, normalizes, and routes every record deterministically, so PHI never reaches a destination that shouldn't hold it.

Built for

  • Hospitals & health systems
  • Academic medical centers
  • Payers
  • Life sciences
  • Medical device makers

A user opens a VIP patient's chart at 2 a.m.
Where does that event go?

Privacy monitoring

Real time

The EHR access event, normalized, reaches the privacy team's rules within seconds.

Security lake

Investigate

Full access history lands in the lake for the investigation that follows.

Compliance archive

Retain

Audit records are kept for the full retention period at object-storage prices.

PHI masked once, upstream. Every system downstream gets the context it needs and none of the identifiers it shouldn't have.

"Protect the patient record before it multiplies. Mask in flight, route by purpose, and keep the audit trail."

Healthcare · Fleak Platform

Bring the log source with PHI in it.

30-minute working session. We'll mask and normalize it live.

Explore Related

PII masking

Mask sensitive data in flight

Detectors, custom patterns, hashing, and quarantine.

See Detail →
Enrichment

Context in every event

Identity, asset, threat intel, and geo context in flight.

See Detail →
Security data lake

OCSF tables in your lake on arrival

Databricks, Snowflake, BigQuery, ClickHouse, and S3.

See Detail →