Enterprise AI That Healthcare Can Trust and Control

The XCaliber Platform powers Merlin. The Admin Console governs it. Every practice configures its own security, guardrails, and oversight rules, no code required.
Book a Demo
Enterprise Challenge

Why Governance Matters for Healthcare AI

When AI assistants handle clinical and operational workflows, healthcare leaders need answers to hard questions.

Who Controls the AI?

Your IT and compliance team must audit every decision, configure access by role, and enforce rules across every persona, without touching a line of code. XCaliber gives your admin team full control through a visual console that replaces configuration complexity with clarity.

Is Patient Data Safe?

Patient records, scheduling data, and clinical notes flow through AI in real time. Every interaction is scoped, encrypted, and governed by HIPAA-compliant data pipelines. The XCaliber Platform enforces field-level access controls to guarantee data reaches only the personas cleared to act on it.

Who Is Accountable?

When a clinical AI makes a recommendation or routes a task, there must be a traceable audit trail. XCaliber logs every Merlin action, escalation trigger, and override event, giving your compliance officer, quality team, and leadership the accountability chain modern healthcare demands.

One AI. Five Role-Based Personas.

Merlin adapts to every role in your organization. Each persona operates within the governance rules your practice configures.

Patient Navigator

Automates scheduling, prescription renewals, and outbound outreach so care teams stay on top of every request and patients get appointments and refills when they need them.
Explore Patient Navigator

Care Coordinator

Keeps patients moving through care pathways by automating referral routing, post-visit follow-ups, chronic disease outreach, and waitlist recovery so nothing falls through the cracks.
Explore Care Coordinator

Quality & Risk Analyst

Turns population health data into action. Identifies open care gaps, tracks Value Based Care metrics, and ensures compliance driving quality scores and protecting shared-savings revenue.
Explore Quality & Risk Analyst

Practice Navigator

Gives practice managers real-time operational visibility from workflow bottlenecks to role performance so they spend less time in spreadsheets and more time leading.
Explore Practice Navigator

AI Nurse

Provides clinical triage support, device troubleshooting, and answers foundational medical questions  all within strict clinical guardrails and immediate escalation to licensed staff.
Explore AI Nurse
Data Foundation

The Data Foundation Merlin Is Built On

The XCaliber Platform connects, sources, and governs all healthcare data, so Merlin always operates on trusted, compliant information.

EHR & Payer Connectivity

Manage costs and performance. Reduce API costs and boost performance by storing real-time EHR data once, so your apps don’t need to make expensive repeat calls.

AI-Ready Data Pipeline

Continuous pipelines that clean, structure, and route patient data in real time, so every Merlin response is fast, accurate, and traceable to a verified data source.

Healthcare Data Fabric

A unified data layer that normalises clinical and administrative data from disparate sources before Merlin ever touches it, so responses are grounded in clean, verified data.

Security & Compliance

End-to-end encryption, role-based data access, HIPAA-compliant infrastructure, and field-level audit trails across every Merlin interaction.
The Reality

Your Command Center for AI Governance

Every practice deserves a solution they can run, no code, no vendor tools. Full control in one place.

Configure Without Code

Set persona rules, escalation thresholds, and data access policies through a visual interface. No engineers required.

Per-Practice, Per-Location

Every site, provider, and care team can operate under their own policies while sharing one platform.

Every Change is Audited

Policy changes, escalation edits, and access updates are all timestamped and auditable in the compliance log..

Live, Not Batch

Monitor Merlin performance in real time. Set thresholds and automate escalation before issues compound.

Human Oversight Built Into
Every Workflow

Your practice decides, via the Admin Console, which actions are automated and which require a human decision.
Task enters Merlin through any channel, portal, voice, chat, or EHR.
AI parses intent, references patient context, and checks governance thresholds.
The practice configuration determines whether to automate or escalate.
Clinical tasks above threshold route instantly to the correct provider.
SECURITY & DATA PROTECTION

Security & Data Protection

Security is enforced at the XCaliber Platform level, and every Merlin interaction is protected end to end.

End-to-End Encryption

All data in transit and at rest is encrypted using AES-256 and TLS 1.3 across every patient interaction and admin event.

Role-Based Guardrails

Data access is scoped per persona, per site, and per provider, so Merlin only surfaces what each role is authorised to see.

HIPAA

Full compliance with HIPAA Privacy, Security, and Breach Notification rules, with BAA support and automated PHI controls.

SOC 2 Type II

Independently audited certification with continuous monitoring for security, availability, and confidentiality.

Continuous Audit Logging

Every Merlin action, admin config change, and escalation event is immutably logged for compliance review and audit.

Zero-Trust Architecture

No implicit trust at any network layer. Identity-verified access, least-privilege policies, and micro segmented infrastructures.
Benefits

Why Teams and Patients

Actually Adopt Merlin

No behavior change. No disruption. No new systems to learn. Merlin works the way your practice already operates and delivers measurable results from day one.

Familiar for Patients

Patients interact through the channels they already use phone, SMS, and the patient portal.

No New Software for Staff

Front-desk teams and care coordinators don’t learn another system or workflow.

No Rip-and-Replace

No new hardware. No complex installs. No disruption to day-to-day operations.

Cross channel support

Patients interact through the channels they already use phone, SMS, and the patient portal.

Works Inside Your EHR

Merlin operates within
athenahealth and your existing clinical workflows.

Every Action is Auditable

IT and compliance teams can trace every assistant action with full visibility and guardrails.

See Merlin in Action

Merlin deploys a family of specialized AI assistants across scheduling, care coordination, care gap closure, and more, helping healthcare teams reduce administrative burden while improving patient access and outcomes.