Sign in

News & Blog

Research, engineering, and ideas from Actava.ai.

Videos

117 videos

ACTAVA | KORA | Agent Access Control

The controls behind PHI and HIPAA compliance. The ones you can point at when someone audits you. Any tool can recite HIPAA back at you. That is a checklist, and a checklist proves nothing. This walks the controls instead. Start with shared language, because the rest doesn't land without it. PHI is health data tied to an identifiable person. A control is a measure that protects it, or proves you are handling it correctly. Controls come in three kinds: administrative, technical, and physical. Software helps with the administrative and technical ones. The physical controls, your locked servers and your facility, are yours. We say so out loud rather than letting the boundary blur. From there, four controls you can open and inspect. Access is granted per agent to named members, roles, and groups pulled from your directory, not to everyone with a login, which turns "minimum necessary" from a principle into a page you can actually look at. Agent Approvals put an admin gate in front of release: nothing a developer builds reaches your staff until an administrator publishes it, so there is change control on the thing touching clinical workflows and no silent releases. Human Approval runs inside the work itself, where the agent pauses at a named task and waits for a named group, and declining the request stops the run. That is a gate enforced by the system, not a prompt asking a model to be careful. Then the receipts. Run history records what ran, when, how long, and what it cost. On voice runs, HIPAA mode keeps the full accounting, with cost split across speech-to-text, text-to-speech, and telephony, without storing the transcript. You get the audit trail without keeping the conversation. And Support Access answers the question people forget to ask a vendor: every time Actava.ai support signs in to your organization, it is listed, attributed, and recorded, so you can see whether anyone has. One thing worth stating plainly. This platform does not make you HIPAA compliant. Your policies, agreements, and oversight do that. What KORA provides are the technical and administrative controls your compliance program stands on: encryption, access logging, redaction, change control, and human gates.

ACTAVA | Agentic Workforce | Agent Webhooks

The agent that starts working the moment your EHR posts an event. No one typing, no window open. Most agent demos start with someone at a prompt. Real healthcare doesn't wait for a human to open a chat window. A patient is discharged at six in the evening and the follow-up clock starts whether anyone is at a keyboard or not. This one starts with a discharge, and nobody typing anything at all. It begins with an honest answer to a simple question: what is actually plugged in? The connector inventory shows Google Workspace, Microsoft 365, Slack, Twilio SMS, and email in a single view, each wired once for the whole organization, each showing its real state as active, inactive, or needs setup, along with how many users have connected. Real states, not aspirations, so you can see what you are trusting before you trust anything to run. Then comes the way another system reaches in. A scoped API key carries its own permissions, concurrency limit, and daily token quota, and that key is the credential your EHR uses. Alongside it, a Remote Execution switch permits outside triggers on a background agent rather than a chatbot waiting for a window. The key plus the switch is the webhook, and external access stays bounded and governed instead of being a blank door into the platform. Then the event fires. The EHR posts a discharge summary, heart failure improved, high risk tier, two medication changes, echo pending, and the agent runs on its own. Here is the part that matters most. It doesn't recall the protocol, it retrieves it. Risk tier traces to the discharge summary. Timing rules trace to the practice's own follow-up protocol. Red flags and both medication changes trace to the red-flag symptom guide. Every clinical line in the output points at a document rather than a memory, which is what makes it defensible. And it stops. The follow-up plan is produced in DRAFT status, held for named human approval before any patient contact, because the protocol requires it and the agent read that requirement too. Autonomy ends exactly where the practice's own governance says it should.

ACTAVA | Agentic Workforce | Voice Agents

The follow-up call every high-risk patient should get: placed reliably, spoken like a clinician, and gone from memory the moment it ends. A nurse is supposed to call every high-risk patient forty-eight hours after they go home, somewhere between admissions, rounds, and everything else. Most of those calls are uneventful. Two minutes of "I'm fine." The problem was never the easy ones. It's that the hard one hides behind a hundred easy ones. A voice agent that makes the call every time is how the exception surfaces instead of slipping. What sets this apart isn't that it can talk. It's that it's built for the clinical moment. The agent is created from a Clinical Admin (HIPAA) preset rather than a blank assistant, so the compliance posture and clinical framing are set before anyone writes a word of instruction. From there you pick the model, the voice, and the language. Then you write who it is, not only what it asks. Warm, respectful of the patient's time, and instructed to gracefully accept "no" and end the call without pushing. To someone two days out of the hospital, tone matters more than anything technical on the configuration page. It also has to say the drug names right. A pronunciation library is built once and attached to the agent, with sacubitril valsartan, dapagliflozin, spironolactone, ivabradine, NT-proBNP, and echocardiogram respelled phonetically and the stressed syllable marked. Common cardiac and diabetes medications are handled automatically, and the library covers the ones that aren't, because an agent that mangles a medication name loses a recently discharged patient in the first ten seconds. The agent holds a real inbound number and can place outbound calls, so the same agent covers the patient who calls back and the patient you need to reach. Every call lands in a searchable, filterable run list, because follow-up at scale is only manageable if each call is accountable and findable. Open any run and you get complete accounting: duration, speech minutes, and cost split across speech-to-text, text-to-speech, and telephony. And the conversation itself? In HIPAA mode, the transcript is never stored. Full operational and cost accounting, zero retained patient conversation.

ACTAVA | Agentic Workforce | Agent MCP and Workspaces

Connect your own systems, describe the work, and let the platform assemble the team, with a person at the step that matters. Most agent platforms give you a model and a prompt box. KORA gives you reach and structure. An agent is only as useful as the systems it can reach, so the MCP Store is where every connector an agent can call lives, enabled once for the whole organization and reused by every agent. One source of truth for what agents can reach, instead of per-agent reconnection sprawl. When a system isn't in the catalog, you register it yourself. A clinic's own EHR becomes callable without waiting for a native integration: a server key, a display name, a transport, an endpoint. The result is an org-private server visible only inside your organization, and it can accept a per-request access token, so access is scoped per call rather than shared. That is the security posture regulated enterprises actually require. Once your systems are reachable, the work is the easy part. You describe the pipeline in plain language, and the AI Workspace Architect designs the team. A referral arrives, match the patient, summarize the referral, check coverage, draft the prior auth, and submit nothing. The architect decomposes that brief into a four-phase team that hands off in order: Intake Coordinator, Coverage Verifier, Prior-Auth Drafter, Review Router. You express intent, not orchestration. Watch the last step in that pipeline. A review router hands the finished packet to a human. Nobody asked for it in the brief. The architect designed it in. And nothing gets built until you sign off. The architect proposes the plan for you to review before a single agent is created. Approve it, and you have a team, with each agent's handoff visible alongside run history, duration, and cost per run, so you can see and account for exactly what the team did and what it cost. Your systems, your brief, our team-building.

ACTAVA | Agentic Workforce | Knowledge Base and Human-in-the-Loop

Teach your agent what your company knows, and tell it exactly when to stop and ask a person. No code required. Two capabilities make an agent trustworthy in a regulated environment, and they answer different questions. A Knowledge Base grounds every response in your authoritative documents, so the agent retrieves and cites the actual policy rather than inventing eligibility, costs, or deadlines. A Human-in-the-Loop gate pauses the agent before any consequential action. Knowledge tells the agent what is true. The gate tells it when to stop. This video builds one end-to-end. Every open-enrollment season, HR teams get buried in benefits questions, and any change that touches someone's paycheck can't go out without a person signing off. So in Agent Studio, the plan summary, life-events policy, dependent eligibility rules, payroll schedule, and enrollment change procedures get uploaded as the agent's authoritative source, scoped to that agent. The Knowledge Base takes precedence over the model's guesses. Then the plan gets written in Instructions, and one step, the one that drafts a payroll change, gets marked with the HR Approvers approval group. That single mark is the entire safeguard. A read-only Human Approval panel rolls up which tasks pause for group sign-off, while authoring stays in Instructions, so there is exactly one place a gate can be armed and nothing gets bypassed by accident. Watch it run. An employee asks about adding a newborn and switching to the family plan. The agent checks the Knowledge Base for the 30-day window, confirms a newborn is an eligible dependent, pulls the exact family-plan deduction, cites the passages it retrieved, drafts the change, and then stops. It notifies the approval group on their own channels. An approver reviews a clean summary of the employee, the event, the new deduction, and the effective date, and clicks approve. The agent resumes where it left off, submits the change, and confirms next steps to the employee. Consequential actions only happen with explicit human sign-off, and the run never hangs waiting on one. Grounded answers on what's routine, human sign-off on what matters.

ACTAVA | Use Cases | Behavioral Health (Multi-Source Crisis Detection)

linical AI that reaches a patient has to survive evaluation first. The demand is real. Roughly 61.5 million U.S. adults need behavioral health care, and 40 percent of them live in a designated provider shortage area. That gap will never close on clinician headcount. Meanwhile about half of the patients who do start treatment disengage before it can work. The pressure to put agents into longitudinal care across millions of covered lives is obvious. The failure rate is the problem. Behavioral health is where general-purpose AI breaks down hardest. On χ-BENCH, frontier models fail 72 percent of complex U.S. healthcare workflows, and fewer than 8 percent of agents stay successful when the same task repeats. That second number is the one that matters here. Agents holding the thread between sessions have to perform on the thousandth interaction, not the first. Scaffolding, not model choice, decides whether an agent is deployable. χ-BENCH was reviewed by researchers from Stanford, Johns Hopkins Medicine, Yale, and Salesforce AI Research. Actava.ai is the factory underneath. With KORA, you evaluate before patients ever see it: simulate agent behavior against your clinical rubrics, log every call and trajectory, and benchmark against χ-BENCH before anything reaches live care, with reviewed work feeding back so behavior improves on evidence. With CURA, the intelligence stays yours: tuned on your clinical protocols and your population, running inside your own cloud at lower cost per interaction. Operate CURA, frontier models, or both, and swap as the frontier moves. And the safety scaffolding ships prebuilt, with crisis detection, consent validation, escalation routing, human-in-the-loop oversight, and audit logging as platform primitives, plus EHR, claims, and FHIR integrations in the box. The behavioral health agent library is yours to extend. The clinical core covers between-session support, multi-source crisis detection, outcome measurement against PHQ-9 and GAD-7, and predictive engagement. From there, intake-to-matched-provider, eligibility-to-payment, ABA session-to-billing, practice compliance, and workforce optimization become expansion surface. Every agent ships with HIPAA compliance, human approval gates, and full audit logging. Behavioral health agents you can govern, prove, and own. Every agent tests before it deploys, every action lands in the audit log, the clinician stays in the lead, and the intelligence stays in your cloud, under your control. Your protocols, your cloud, your model.

ACTAVA | Agentic Workforce | Agent Skills & Memory

Author expertise once, set the rules once, and let every agent inherit both without bloating a single prompt. Every agent needs two very different kinds of knowledge, and most platforms cram both into one system prompt. KORA separates them into first-class sections on the build screen. Skills carry the reusable how: org-wide capability bundles of instructions plus files, authored once and shared. Memory carries the always and never: the short standing rules unique to how one agent should behave. Different jobs, different homes. This video builds a real one. A nursing team writes an end-of-shift handoff report every shift, same format, different details, different rules per team. The user describes that job to Ava in plain language, and Ava proposes the shape of the agent rather than presenting a form to fill. Before drafting anything, she searches existing agents and the organization's Skills Store, so you surface expertise the org already owns instead of building a duplicate. Then the Skill goes on. The vetted shift-handoff-report skill carries the SBAR template, the section ordering, the step-by-step instructions, and a bundled blank PDF the agent fills, attached in a single action. Here is the architectural payoff: only the skill's name and description sit in the system prompt. At runtime the agent calls LoadSkill to pull the full instructions from the session workspace, and only when a task actually needs them. That is progressive disclosure, and it is what lets an organization attach many vetted skills without slowing any agent down. The standing rules land somewhere else on purpose. Always cc the on-call lead. Never include patient MRNs in the summary. Ava recognizes that always and never language and writes each one into Memory as its own visible, deletable entry. Guardrails stay legible and editable instead of buried in a prompt where nobody can find them, which is exactly what you want when a compliance officer asks what an agent was instructed to do. One more thing worth watching. Ava runs a server-verified readiness check and then submits the draft. Ava only ever drafts. A human admin reviews and approves before anything goes live. Skills are reusable expertise. Memory is standing rules. One agent, powered by both, built entirely in conversation.

ACTAVA | Use Cases | Care Management (End-to-End Agents)

The case for why care management can't scale on people alone, and what to do about it. Care management revenue runs on one equation: coordinators times billable minutes. To serve more patients, you hire more people. But the people aren't there. Turnover runs past twenty-five percent, HRSA projects a shortage of roughly 141,000 physicians by the late 2030s, and millions of patients who qualify for chronic care management stay unenrolled. You cannot hire your way out of that gap. General-purpose AI doesn't close it either. Care management is a longitudinal, multi-system coordination problem, with teams working across months rather than tickets closed in a single pass. On χ-BENCH, which grounds real administrative work in care policy across multiple tools, the strongest frontier agents finished twenty-eight percent of tasks on the first try. The problem isn't intelligence. It's variability, and single-task automation breaks on work this variable. Here is the finding that changes the design. The same frontier model succeeded with strict rules in the harness and failed outright without them, on the identical task. Reliability isn't the model. It's the system around the model. And governance is what makes that system inspectable: as Johns Hopkins frames it, accountability requires knowing which agent did what, under which policy, and with what result. Until you can measure reliability, you cannot measure ROI. That's why Actava.ai is three parts of one platform rather than a point tool. KORA is where you build the workflows, with multimodal agents across background, voice, and chat, each passing testing before it goes live. CURA is where you own the intelligence: five models reached the same decision 93 to 100 percent of the time with rules kept in the harness. CHRYSO is where you prove it, with timestamped sign-offs and audit packages on demand. And the stakes are rising on a schedule. CMS is expanding Medicare Advantage audits from about 60 plans a year to all 550. Audit readiness is moving from exception to expectation, which means the governance you build now is the audit package you will need soon. Build the workflows. Own the intelligence. Prove the governance.

See what ACTAVA can do for you

Bring one workflow your team still runs by hand. We'll show you the agent that runs it.