(Industries) Healthcare
Kyde detects when an agent accesses patient data that is not part of its task.
Behavioral scoring for AI agents.
Where an agent that works with patient data goes wrong.
(Access)
An agent accesses patient records that are not part of its task.
(Drift)
A documentation agent changes its behavior after an update.
Hospitals are starting to use agents for documentation.
- (Practice)Agents draft discharge letters, code diagnoses for reimbursement and prepare documentation. Each of them reads patient records to do it.
A documentation agent opens records from other wards.
Each letter it writes is correct.
(What happened)
- 07:30 After an update, a documentation agent starts drafting the discharge letters for one ward.
- 07:38 It opens the records of the twelve patients it writes letters for, as it always does.
- 07:42 Then it opens the records of 38 patients on other wards.
(What Kyde did)
The records it opens are outside the agent's baseline. Kyde blocks further access and sends the record of the run to the data protection officer.
*Illustrative. Times and numbers are an example, not a customer's.
Kyde compares each run of an agent with the agent's normal behavior, using frequencies and statistics.
No language model is involved in the decision. The same record always produces the same score, and anyone with the record can recompute it.
Language models may be used later to help explain a finding. They do not make the decision. When an agent deviates, a person decides what happens next.
- GDPR Article 9, special category health data
- NIS-2, transposed in Germany by the NIS2UmsuCG since 6 December 2025: health providers are essential entities under the BSIG
*Which of these applies depends on the process the agent runs. Kyde is built for them. It does not make a process compliant.
How to start
As a design partner, free of charge.
-
(Step 1) Connect
We connect to one agent you run in documentation or coding. Read only, nothing changes in how it works.
-
(Step 2) Two weeks
Kyde learns the agent's normal behavior and shows you each run that deviates from it.
-
(Who you talk to)
Joerg Radehaus, co-founder, product · joerg@kyde.com Jürgen Eckel, co-founder, technology · juergen@kyde.com
*We work with a small number of design partners at a time.
(What is measured)
Kyde's detection is measured on software agents under prompt injection, in the AgentDojo benchmark. We have no measurement on an agent in a hospital yet. That is what we do with design partners.
(What Kyde does not see)
Kyde does not interpret the content of a patient record. It sees which records an agent opens, how many, and whether they belong to its task.