Clinical NLP Governance — Air-Gapped Managed Service for VA/DoD/Hosp
Kriv AI · Cybersecurity & IT
Certification per AWS Marketplace.
Evidence tier Source Confirmed · 4 captures on record
What the publisher says
As described on AWS Marketplace.
**Every healthcare CIO and CISO running an air-gapped, FedRAMP-High, or IL5/IL6 environment has the same problem: HealthLake, Bedrock, Comprehend Medical, Nuance DAX, and Watson Health are unavailable, deprecated, or blocked at their perimeter — yet clinical research, revenue cycle, and quality programs that rely on clinical NLP cannot pause waiting for a public-cloud path.**
VA medical centers (150+ facilities), DoD Defense Health Agency facilities on MHS GENESIS / Oracle Health (Cerner), rural + critical-access hospitals, correctional medical, tribal health (IHS), academic medical centers with sovereign-data research, and international hospitals under data-residency rules (Singapore MoH, UK NHS Digital, Germany BSI) all share one requirement —**PHI cannot leave the Customer's network, but modern clinical NLP is still required.**
Show the rest of the publisher’s description (13 more lines)
Compliance is layered: HIPAA + 42 CFR Part 2 + 38 USC 7332 + 10 USC 1079/1086 + VHA Handbook 1605.01 + FedRAMP + DoD SRG IL + FIPS 140-3 + Section 508 + NIST SP 800-171/800-53 Rev 5 + ATO, simultaneously.
Every clinical NLP offering on AWS Marketplace today requires public-cloud or is platform-specific. Comprehend Medical is public-cloud only. John Snow Labs bills by vCPU-hour at $1.86–$253.56/hr with Customer operating the software. Commercial clinical NLP (Linguamatics/IQVIA, Averbis, Clinithink, 3M/Solventum, Philips IntelliSpace) runs $150K–$500K/yr ACV with heavy licensing and no AWS Marketplace managed service. Nuance DAX is ambient-scribe at $369–$830 per provider per month with a cloud dependency air-gapped + IL5/IL6 cannot accept.
**Nothing on AWS Marketplace today delivers a fixed-fee, air-gap-compatible, managed clinical NLP service with a transparent monthly tier and a federal posture (SAM.gov + CAGE + FedRAMP-eligible patterns).** This listing closes that gap.
Kriv is SAM.gov registered (UEI DATARJAUUXQ2, CAGE 1AEF1, March 25, 2026). The managed service operates a self-hosted clinical NLP toolkit on Customer infrastructure: air-gapped, on-prem, VPC-isolated AWS, Outposts, or GovCloud, with all PHI inside Customer's ATO boundary.
**Kriv operates the software; Customer does not redistribute.** Methodology-reference stack, not a productized Kriv platform.
**Reference stack (modular).** Microsoft Presidio + scispaCy + MedCAT for PHI de-identification and clinical NER; Ollama / vLLM / llama.cpp for local LLM inference (Mistral, Llama 3, BioMistral, Meditron, no public-cloud inference by default); pgvector or Qdrant for embeddings; MinIO or Customer S3 for object storage; Prometheus + Grafana; HIPAA §164.312(b) audit logging; FIPS 140-3 cryptography.
**Two phases.**
**Phase 1**: Discovery & Deployment ($40K one-time, 4–6 weeks; 90-day lead for federal/DoD): site + network + security review, install on Customer infrastructure, de-id tuning, i2b2 2014 + n2c2 benchmarks (target recall ≥95% / precision ≥99% on i2b2 2014), admin training for 5 staff, handover. Phase 1 required before Phase 2.
**Phase 2:** Monthly Managed Service: ops, monitoring, patching, IR. 12-month minimum term.
**Three monthly tiers.**
Essentials $5K/mo (8x5 email, synthetic probe monitoring, quarterly security updates, drift checks, monthly ops report; ≤100K docs/mo). Standard $10K/mo (adds 24x7 on-call, 4-hr Sev-1 SLA, 99.5% uptime, monthly drift-retraining, quarterly HIPAA/de-id attestation; ≤500K docs/mo). Enterprise $15K/mo (adds quarterly fine-tuning, 0.25 FTE dedicated engineer, 99.9% uptime, annual NLP governance review, priority IR, FedRAMP-ready + NIST AI RMF artifacts; unlimited volume). 3-year 10% / annual prepay 8% via private offer. First-year ACV floor $100K.
**Important disclosures.** Kriv is not a CLIA lab, radiology reader, CDS provider, FDA-registered device manufacturer, utilization-review org, or CRO; non-diagnostic clinical NLP only. No legal, regulatory, clinical, or compliance advice. No FedRAMP/IL5/IL6 ATO guarantee; ATO remains Customer AO responsibility; Kriv provides support artifacts only. No per-record de-ID accuracy guarantee; performance is stack-level; HIPAA Privacy Officer retains §164.514 Safe Harbor/Expert Determination authority. Not 8(a)/HUBZone/SDVOSB/WOSB/VOSB; set-asides require certified subcontractors. Open-source operated on Customer infra; no redistribution rights. MinIO AGPLv3 reviewed; SeaweedFS/Ceph/S3 alternatives supported. Infrastructure costs borne by Customer. Portfolio 01D is reference methodology, not a product platform. Claude is out of default scope; optional Bedrock Claude integration separate.
**EDP-eligible** — the $40K Discovery & Deployment fee and monthly managed service retainer ($5K / $10K / $15K/mo) count toward your AWS Enterprise Discount Program commitment (up to 25%). Structure via Marketplace private offer. For federal/DoD procurement, private offers also support EDP burn-down under government cloud procurement vehicles. Contact info@kriv.ai or +1-732-433-5564.
Highlights
Highlighted by the publisher on AWS Marketplace.
Air-gap-compatible clinical NLP managed service — PHI never leaves Customer network. Deploys on Customer infrastructure: air-gapped, on-prem, VPC-isolated AWS, Outposts, or GovCloud. Target tenants: VA (150+), DoD DHA + MHS GENESIS, rural / critical-access hospitals, correctional medical, tribal (IHS), academic medical, international (Singapore MoH / UK NHS / Germany BSI). HIPAA + 42 CFR Part 2 + 38 USC 7332 + FedRAMP + IL5/IL6 + FIPS 140-3.
Reference stack: Microsoft Presidio + scispaCy + MedCAT + Ollama / vLLM + pgvector / Qdrant + MinIO or Customer S3 + Prometheus + Grafana. Local LLM inference with Mistral / Llama 3 / BioMistral / Meditron — no public-cloud model inference by default. i2b2 2014 + n2c2 benchmarks (target recall ≥95% / precision ≥99% PHI de-id). HIPAA §164.312(b) audit logging. FIPS 140-3 cryptography. MinIO AGPLv3 reviewed in Discovery with SeaweedFS / Ceph / Customer S3 substitution paths.
SAM.gov registered (UEI DATARJAUUXQ2, CAGE 1AEF1, Mar 25, 2026) · AWS Select · Anthropic CPN · $40K Discovery & Deployment (4–6 wks; 90-day federal lead) + $5K/$10K/$15K per month (Essentials/Standard/Enterprise) with 12-month minimum. First-year ACV floor $100K. 3-year 10% / annual prepay 8% via private offer. Kriv operates software; Customer does not redistribute. NOT 8(a)/HUBZone/SDVOSB — set-asides require subcontracting through certified partners.
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Compliance
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Vendor
External enrichment · as of 2026-08-29
Sources
Publisher resources
3 linksLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.