Company
Built by Forged Technology.
Forged Med is the healthcare product of Forged Technology, which builds software for regulated work — the kind where being able to prove what happened matters as much as it happening.
Visit Forged Technology (opens in a new tab)Why this exists
Small practices got the worst of both options.
A solo provider running an independent practice has the same obligations as a health system — the same Security Rule, the same duty to a patient whose record is read by someone who had no reason to read it — and none of the same resources.
What is on offer is usually an enterprise EHR that is auditable and unusable, or a modern tool that is a pleasure to use and cannot tell you who opened a chart last Tuesday. Both answers are bad, and the second one is getting worse as models get bolted onto products that were never designed to govern them.
So we built the third answer: rigorous controls, hidden behind guided workflows. The provider taps “sign note.” Everything else happens underneath.
How we build
Commitments, each with a mechanism.
A principle with no enforcement is a preference. Each of these is enforced by something that fails the build when it is violated.
Security first, explicitly
When security and convenience conflict, security wins. The security test suite is a required merge gate: a change that weakens a control cannot ship.
Usability by hiding, never by removing
Complexity is hidden from the user; it is never deleted from the system. A confirmation screen surfaces the one decision the person needs to make.
Tenant isolation as the root
Every row and event carries a tenant id, enforced in application code and again by the database.
AI governed at every step
One gateway every model call goes through, a risk tier on every call, and a human signature on anything clinical.
Honest claims
We say what has been implemented and what has not been independently verified. The compliance status page is deliberately unflattering.
Portable by construction
Pluggable identity and key management, and FHIR export by patient or group. A whole-practice export with its audit trail is not yet self-serve — we run it with you — and making leaving a workflow you can run yourself is the goal, not a claim.
What we do not do
The scope we refuse is part of the design.
We do not sell or mine your data.
Not for research, not for model training, not aggregated.
We do not price by claim volume.
Per practice, per isolation tier. Billing more should not cost you more.
We do not ship unsupervised clinical AI.
Clinical output is drafted, then signed by a person.
We do not claim certifications we lack.
See the compliance status section on the security page.
Talk to the people who built it.
Forged Technology is small enough that you will reach an engineer.