# Hubble

> The intelligence layer for patient information. Hubble assembles a complete, normalized medical record from the systems healthcare runs on (EHRs and payers), through two directions of authorized access: patient-mediated access (the patient's own right of access) and provider-mediated access (authorized reads and writes for provider customers).

Hubble is a Y Combinator-backed healthcare data platform. It reaches EHRs (Epic, Oracle Health/Cerner, athenahealth) and payers (UnitedHealthcare, Aetna) and returns a complete, longitudinal patient record in one consistent, normalized shape. The same data layer powers both patient-mediated and provider-mediated access, and is exposed to applications and AI agents through one API surface, including a Model Context Protocol (MCP) server.

## Data Access Models

Hubble supports both directions of authorized access on one platform:

- **Patient-mediated access**: Built on the HIPAA individual right of access (45 CFR 164.524) and the 21st Century Cures Act. An individual verifies their identity to NIST IAL2 (government-issued ID plus a liveness check) through a certified identity provider, authorizes the request once, and receives their own complete record gathered across every system they have touched: EHRs reached directly and through health information exchange (HIE) networks, plus claims and coverage from payers where they authorize it, all normalized into one structure. The patient then directs where the record goes, per recipient (a provider, an attorney, a research program, or an app they choose), with consent they can revoke at any time. No per-provider contract is needed, so it is live on day one. Specially protected records (substance use under 42 CFR Part 2, psychotherapy notes, HIV and genetic information, and minors' records) require separate, specific authorization and are handled on their own consent path.
- **Provider-mediated access**: Authorized reads and writes into the systems a provider customer uses, through one API surface across every tenant. Typically 2 to 4 weeks to wire up.

## What Hubble Does

- **Complete patient record**: One normalized record assembled across EHRs and payers, structured and unstructured data alike
- **EHR access**: Epic, Oracle Health (Cerner), athenahealth (reached directly and through HIE networks)
- **Payer access**: UnitedHealthcare, Aetna, and other payers (claims and coverage)
- **MCP server**: One platform gives AI agents access to 40+ healthcare tools across these systems
- **HIPAA-compliant architecture** with HIPAA-grade audit trails on every action
- **Governance**: Identity management, scoped permissions, and access controls
- **Observability**: Evals, traces, and quality monitoring to catch hallucinations and silent failures

## Platform Pillars

1. **Context**: Normalized access to EHRs and payers
2. **Governance**: Identity, scoped permissions, full audit trails, built for HIPAA
3. **Quality**: Evals, observability, and traces for production-grade reliability

## Use Cases

**Patient-mediated:**
- Patient-authorized medical record retrieval across EHRs and payers
- Legal records retrieval (personal injury, workers comp, disability) directed by the patient to their attorney
- Life insurance and disability underwriting records, gathered with the applicant's authorization
- A complete history a patient hands to a new care team on day one
- Real-world data and clinical trial matching that patients opt into

**Provider-mediated and agent workflows:**
- Eligibility verification and appointment scheduling (real-time coverage checks)
- Prior authorization and billing automation (payer submissions)
- Prescription management and medication reconciliation
- Care navigation and coordination workflows
- Ambient clinical documentation

## Who Uses Hubble

Healthcare AI companies, digital health products, and teams that need patient records (including legal and life sciences use cases). Hubble handles the integration, compliance, and governance infrastructure so product teams can focus on their own logic instead of spending months on EHR and payer integrations.

## Frequently Asked Questions

**What is patient-mediated access?** Patient-mediated access lets an individual authorize access to their own medical records once and receive a complete, normalized record in return. The patient is the account holder. Hubble gathers the record across every system they have touched (EHRs reached directly and through HIE networks, plus payers where authorized), and the patient directs where it goes.

**How is patient-mediated access different from provider-mediated access?** Patient-mediated access is built on the individual's HIPAA right of access: the patient verifies their identity, authorizes the request, and directs their own record. Provider-mediated access is authorized reads and writes into the systems a provider customer already uses. Both run on Hubble's data layer across the same EHRs and payers.

**What is the legal basis for patient-mediated access?** The HIPAA individual right of access (45 CFR 164.524) and the 21st Century Cures Act. The patient directs the copy to themselves and, where they choose, to a recipient they name, with consent they can revoke at any time.

**How long does it take to integrate Hubble?** It depends on the access model. Patient-mediated access is live immediately, so you can pull a complete record on day one. Provider-mediated access takes 2 to 4 weeks to wire up. Either way the integrations are already live, so the work on your side is defining permissions, not building plumbing.

**Is Hubble HIPAA-compliant?** Yes. Hubble is HIPAA-compliant from day one. Identity, scoped permissions, and full audit trails are built in.

**Which EHRs, payers, and patient sources does Hubble support?** Hubble is live across Epic, Oracle Health (Cerner), athenahealth, UnitedHealthcare, and Aetna, with 40+ tools spanning EHRs and payers. New systems are added regularly.

**What is an MCP server for healthcare?** An MCP (Model Context Protocol) server gives AI agents a single, standardized way to access external systems. Hubble is an MCP server for healthcare: one platform connecting AI agents to EHRs and payers with normalized data, governance, and HIPAA-grade audit trails.

## Team

- **Prabha Dublish** (CEO). First product hire at Grow Therapy (Sequoia-backed, scaled from $90M to $3B valuation). Launched AI features at Grow Therapy. Former Meta PM and PMM.
- **Aaron Leon** (CTO). Tech lead at Amazon One Medical. Led 50+ engineers building the in-house EHR and AI tools serving over 1 million patients. Built Amazon Care's data platform.

## Company

- Backed by Y Combinator
- Website: https://www.hubble.ai
- Book a demo: https://calendly.com/prabha-hubble/30min

## Key Pages

- Home: https://www.hubble.ai/
- Solutions, Patient-Mediated Access: https://www.hubble.ai/solutions/patient-mediated-access
- Solutions, Provider-Mediated Access: https://www.hubble.ai/solutions/provider-mediated-access
- Solutions, Data Infrastructure: https://www.hubble.ai/solutions/data-infrastructure
- Solutions, Workflows: https://www.hubble.ai/solutions/workflows
- Case Studies: https://www.hubble.ai/case-studies
- Blog: https://www.hubble.ai/blog
- Blog, Introducing Patient-Mediated Access: https://www.hubble.ai/blog/introducing-patient-mediated-access