Body Heal Book a demo Launch BhAi
SECURITY AND PRIVACY

Health data deserves a higher bar.

BhAi was designed around zero-trust principles from day one, not bolted on later.

☁️

Cloud infrastructure

AWS provides compute and Google Gemini provides AI reasoning, so BhAi runs on enterprise-grade infrastructure from both.

🔐

Zero-trust by design

Cross-cloud services authenticate with Workload Identity Federation, so there are no long-lived shared credentials.

🛡️

Access and detection

API Gateway, Lambda, GuardDuty and Cognito handle access control, threat detection and identity.

🔑

Secured communication

Requests are verified with hashed tokens, so raw credentials are never exposed.

COMPLIANCE STATUS

Aligned by design. Certification in progress.

SOC 2 principlesHIPAA conceptsIndia DPDP Act

We are honest about where we are: formal third-party certification is not complete yet. We will walk enterprise and insurer partners through our current posture and roadmap on a call.

Your data, your control

We collect only what powers a member's plan, encrypt data in transit and at rest, and never sell it. Partners see aggregated, non-identifying trends only. Read our Privacy Policy.

BhAi is a lifestyle and wellness coaching tool. It does not diagnose or treat medical conditions.

FAQ

Common questions from partners.

What is BhAi?

An AI lifestyle and metabolic coaching platform. It turns member data into personal guidance and programme-level reports for gyms, employers and insurers.

Can we white-label it?

Yes. BhAi runs as a white-label or co-branded experience under your name.

How long does a pilot take?

Onboarding takes a few weeks. A full pilot runs 3 to 6 months to validate engagement and outcome trends.

Is BhAi SOC 2 or HIPAA certified?

Not yet. The architecture is designed to align with SOC 2 principles, HIPAA concepts and India's DPDP Act. Formal third-party certification is in progress, and we will walk you through our current posture during diligence.

Which integrations are supported?

Integrations are scoped per pilot, such as wellness data flows and approved system connections.

How is pricing structured?

White-label or revenue share for gyms, PMPY for corporates, and custom partnerships for insurers.

Still have questions?