Healthcare system adopts HIPAA-compliant AI with F5

A medical organization deployed F5 Workforce AI Security to bring previously ungoverned AI use under proper protection and oversight, securing sensitive patient data and ensuring HIPAA compliance while empowering healthcare workers to use AI for more efficient research, diagnoses, and administrative tasks.

Business challenge

A clinical healthcare organization provides comprehensive medical services across multiple hospital campuses and outpatient facilities. More than 2,000 healthcare professionals manage complex patient care operations, handling sensitive patient health information (PHI), medical records, treatment plans, and confidential clinical data daily in strict compliance with HIPAA and data security protocols.

The clinical system expects AI to help enhance patient care, streamline administrative workflows, and improve clinical decision-making. Unfortunately, the system’s leaders had no clear understanding of how their employees were already using AI tools across departments. Were clinical staff uploading patient data to public AI services? Which specialties were most active? What types of medical information were being shared with unauthorized systems?

The system was at risk for AI licensing sprawl as individual departments recognized the potential of AI tools for medical research, patient documentation, and administrative tasks and began independently procuring AI subscriptions and services without central coordination. Blind spots were rising for compliance, risk, and adoption.

As it moved forward, the system needed greater visibility and security, with strict HIPAA compliance as healthcare professionals handle protected health information (PHI). The risk of inadvertent patient data exposure to public AI services posed significant regulatory and legal liabilities.

In addition, the technology stack under the organization’s existing enterprise AI services required substantial IT resources to manage, update, and patch. IT personnel wanted to focus more on core healthcare technology initiatives.

Solution

The system’s administrators decided to deploy F5 Workforce AI Security.

Results

Obtain comprehensive visibility and monitoring

Once Workforce AI Security was in place, the healthcare system gained visibility into AI use across the entire workforce and across both public AI services and private healthcare AI applications. The solution delivered detailed insights into clinical staff activity, including how physicians, nurses, and specialists were using AI tools for patient care and administrative tasks. Departmental usage patterns became clear, revealing which medical specialties and administrative groups were most actively adopting AI.

Leaders were able to discover shadow AI use, including all AI subscriptions and services accessed across clinical departments, regardless of the procurement channel used. The deployment also revealed the full scope of AI adoption, including unauthorized subscriptions, to help address licensing sprawl. Full visibility also enabled the organization to consolidate redundant AI licenses across clinical departments, thereby optimizing costs. The deployment brought previously ungoverned AI use under proper IT and security oversight.

Protect data with full HIPAA compliance

Armed with complete usage data, the healthcare organization gained confidence that their AI governance was robustly HIPAA-compliant. The secure private portal of Workforce AI Security ensures all AI interactions remain within the organization's controlled environment, eliminating the risk of PHI exposure to public AI services. Advanced redaction capabilities automatically identify and protect patient identifiers, medical record numbers, and other PHI before any AI processing, maintaining patient privacy without limiting AI-powered insights.

Clinical staff were empowered to use AI for medical research, diagnoses, and administrative tasks through custom healthcare intent classifications tailored for their workflows. This change maintains strict compliance boundaries, applying contextual analysis for why AI is being used to better apply guardrails and protect sensitive data. Meanwhile, comprehensive audit trails and compliance reporting ensure all AI activities meet HIPAA requirements and provide documentation for easier regulatory reviews.

Reduce infrastructure management

The cloud-based, SaaS delivery model of Workforce AI Security eliminates the need for the healthcare system’s IT team to manage internal servers, freeing them for core healthcare technology initiatives. Automatic updates and maintenance reduce the IT operational burden, while the architecture can scale as organizational needs change without additional hardware or technical learning curves.

In total, deploying Workforce AI Security helped the clinical system enhance patient care capabilities and move forward with confidence in their ability to implement and govern safe, compliant AI.

See all customer stories ›