πŸ›‘οΈ Sector Evidence Hubs:
Sector Evidence Hub: healthcare.aiacts.app

Healthcare & Life Sciences AI Governance Hub

What compliance frameworks apply to healthcare and clinical AI?

Clinical AI diagnostics and triage tools fall under EU AI Act Annex II (MDR Regulation 2017/745), requiring clinical evaluation dossiers, post-market surveillance plans, and strict physician oversight pathways.

8-Dimension Evidence-Requirement Matrix (Annex III)
01 Clinical Safety

Clinical Evaluation & Diagnostic Accuracy

Clinical investigation dossiers & sensitivity/specificity validation (MDR Annex XIV)

02 Fairness

Demographic Diagnostic Bias Auditing

Multi-cohort clinical validation across age, sex, and ethnicity subgroups

03 Human-in-the-loop

Physician-in-the-Loop Clinical Oversight

Mandatory licensed clinician sign-off on automated diagnostic recommendations

04 Transparency

Clinical Explainability & Diagnostic Saliency

Heatmap and feature importance visual proof for clinical decision support

05 Data Governance

Patient Data Provenance & HIPAA/GDPR Sanitization

Strict patient de-identification receipts & synthetic data validation

06 Continuous Monitoring

Post-Market Clinical Follow-up (PMCF)

Continuous real-world clinical drift and adverse diagnostic event logging

07 Resilience

Medical Device Cybersecurity (MDCG 2019-16)

Clinical device firmware encryption & tamper-resistant telemetry

08 Evidence Packaging

Cryptographic Clinical Dossier & Conformity SEAL

Deterministic SEAL receipt for regulatory audit submission

Sector AI Models & Benchmarks (Hugging Face / Open Source)
+ Submit Sector Model β†’

Foundation models, fine-tunes, and specialized architectures classified for this vertical regime.

Google DeepMind Tier 1 GPAI
Gemini 2.5 Pro

Gemini 2.5 Pro surpasses the 10^25 FLOPs threshold, classifying it as a GPAI model with systemic risk under Article 51. Obligations include mandatory model evaluations, adversarial testing, systemic risk assessments, cybersecurity safeguards, and technical documentation for downstream deployers.

View Assessment β†’ Claim Model β†’
Google DeepMind Standard
Gemini 2.5 Flash

Gemini 2.5 Flash operates below the 10^25 FLOPs cumulative computation threshold, classifying as standard General Purpose AI (GPAI). It must maintain technical documentation, comply with EU copyright laws, and supply transparency summaries without systemic risk mitigation burdens.

View Assessment β†’ Claim Model β†’
Google DeepMind Tier 1 GPAI
Gemini 3.7 Flash

Gemini 3.7 Flash includes native support for deterministic human-in-the-loop gating when orchestrated via MCP tool calling, allowing downstream providers to fulfill Article 14 oversight requirements in automated decision workflows.

View Assessment β†’ Claim Model β†’
Audited Sector Training & RAG Datasets (Art. 10)
+ Register Dataset β†’
Art. 10 Provenance Audited
FineWeb (Hugging Face)

undefined

Inspect Dossier β†’ Claim Dataset β†’
Art. 10 Provenance Audited
Common Crawl Corpus

undefined

Inspect Dossier β†’ Claim Dataset β†’
Art. 10 Provenance Audited
The Pile (EleutherAI)

undefined

Inspect Dossier β†’ Claim Dataset β†’
Interactive Sector Spaces & Sandboxes (Art. 57)
Explore All Spaces β†’
⚑ VOS Edge / Workers ⭐ 142
EU AI Act Statutory Explorer

Interactive Article-by-Article statutory explorer, obligations matrix, compliance timeline, and penalty calculator.

Launch Space β†—
⚑ Cloudflare Workers / D1 ⭐ 98
InsureAI Underwriting Sandbox

Live insurance risk sandbox testing protected class proxy discrimination, actuarial fairness, and Article 86 denial explainability.

Launch Space β†—
Designated Statutory Authorities & Regulators
European Medicines Agency (EMA) Active
Clinical AI & Pharmacovigilance Oversight
Notified Bodies (MDR / IVDR) Active
Conformity Assessment & CE-Marking Certification
FDA CDHR (US) Active
Software as a Medical Device (SaMD) Validation