# Carta Healthcare

> Carta Healthcare, Inc. is a San Francisco based clinical data management company that
> applies a "Hybrid Intelligence" model — proprietary AI paired with certified human
> clinical abstractors — to extract, validate and submit structured clinical data on
> behalf of hospitals and health systems. Carta Healthcare publishes NO public API,
> developer program, or machine-readable API contract. This file is generated by API
> Evangelist from the public web surface; it is not published by Carta Healthcare.

## API surface

- No public API. Every contract-discovery probe against www.carta.healthcare returned
  the WordPress 404 shell: /openapi.json, /openapi.yaml, /swagger.json, /v1/openapi.json,
  /api-docs, /docs, /redoc, /graphql, /llms.txt.
- No developer, docs, api, app, portal, status or mcp subdomain resolves for carta.healthcare.
- No /.well-known/ document is served. /.well-known/oauth-authorization-server and
  /.well-known/oauth-protected-resource return HTTP 200 but serve the WordPress homepage
  HTML; a control path returns 404, confirming a soft-200 rewrite, not a discovery document.
- The only machine-readable endpoint on the domain is WordPress core's REST API at
  https://www.carta.healthcare/wp-json/ — a CMS default, not a product API.
- Products are delivered under enterprise agreements integrated directly into hospital
  EMR environments.

## Products

- [Voyager](https://www.carta.healthcare/ai-platform/): AI data platform trained by clinicians, with data provenance and auditability.
- [Lighthouse](https://www.carta.healthcare/clinical-data-management/clinical-data-abstraction/): AI-assisted abstraction for clinical registries, including oncology/cancer registry.
- [Atlas](https://www.carta.healthcare/clinical-data-management/clinical-registry/): AI registry abstraction and submission to registry bodies.
- [Navigator](https://www.carta.healthcare/clinical-data-management/): clinical data intelligence and analytics.
- [Expert Abstraction Services](https://www.carta.healthcare/clinical-data-management/abstraction-services/): outsourced and staff-augmentation abstraction.

## Docs

- [Website](https://www.carta.healthcare/)
- [Hybrid Intelligence](https://www.carta.healthcare/hybrid-intelligence/)
- [Enterprise Clinical Data Management](https://www.carta.healthcare/clinical-data-management/)
- [Resource Library](https://www.carta.healthcare/resource-library/)
- [News and Press Releases](https://www.carta.healthcare/news-and-pr/)
- [Blog RSS](https://www.carta.healthcare/feed/)
- [Recognized and Trusted](https://www.carta.healthcare/our-story/recognized-trusted/)
- [GDPR / Privacy Policy](https://www.carta.healthcare/gdpr-policy/)
- [Contact](https://www.carta.healthcare/contact-us/)

## Compliance

- SOC 2 Type 2, unqualified opinion (security, availability, confidentiality), auditor AssurancePoint LLC.
- HIPAA — PHI processed as a business associate for hospital and health system clients.
- GDPR / Privacy Policy, last updated 2025-12-10.
- ACC NCDR certified software vendor (CathPCI, AFib Ablation, STS/ACC TVT registries).

## API Evangelist artifacts

- [conformance/carta-healthcare-conformance.yml](conformance/carta-healthcare-conformance.yml)
- [security/carta-healthcare-domain-security.yml](security/carta-healthcare-domain-security.yml)
- [well-known/carta-healthcare-well-known.yml](well-known/carta-healthcare-well-known.yml)