HIPAA compliant agent memory systems
Agent memory systems suitable for protected health information workloads — HIPAA-aware vendors that sign BAAs. Ranked by maturity tier.
56 systems match this filter
Tier 1 — battle-tested (38)
- Mem0 Vector + graph + KV (hybrid)
Universal memory layer for AI agents. Three concurrent stores (vector + graph + KV); LLM-extracted facts; concurrent retrieval via ThreadPoolExecutor.
- Langfuse Memory ops as named spans + Agent Graphs
Acquired by ClickHouse (2026-01-16); product and MIT-licensed repo continue under the Langfuse name. Memory module reads/writes captured as named spans. Trace Log View concatenates every agent step including memory ops. Agent Graphs (GA …
- LangSmith Memory mutations as distinct span types
Memory reads, vector DB retrievals, state changes are distinct span types in traces. RAG eval separates retrieval quality (context precision) from generation quality (faithfulness). Dataset versioning guards against eval drift.
- Zep & Graphiti Bi-temporal knowledge graph
Bi-temporal knowledge graph (event time + ingestion time). Strong on chronological reasoning and contradiction tracking. Graphiti is the open-source core.
- Browserbase Programmatic session persistence (dev infra)
Cloud browser infrastructure for AI agents. Headless Chromium sessions with persistent cookies, localStorage, session recording — agent workflows carry state across runs. Memory at the session/automation tier rather than conversational.
- Lakera Guard / Lakera Red Real-time prompt-injection + poisoning screen
Acquired by Check Point Software (completed by 2025-11-11); being folded into Check Point's AI security platform. Screens every prompt, response, and retrieved document for indirect prompt injection — primary vector for memory poisoning.…
- Supermemory Memory graph + extraction + RAG
Memory engine with API, app, browser extension, and MCP server. Extracts facts, tracks updates, resolves contradictions, auto-forgets expired info. Plugins for Claude Code, OpenCode, OpenClaw, Hermes.
- Augment Code Real-time semantic Context Engine + curated Agent Memory
Real-time knowledge graph indexed from connected repos + commit history + CI/CD + tickets + docs. Separate Agent Memory layer (Sept 2025) captures session decisions/corrections/goals as discrete items with developer review/approval UI. M…
- Abridge Grounded-transcript provenance
Clinician-assist ambient documentation. Source mapping: every AI-generated summary element traced back to the source utterance. Audit-and-trust layer over episodic memory. Built on proprietary 1.5M+ medical-encounter dataset.
- Anthropic Claude Memory File-backed + tool-driven + Auto Dream
Memory tool API + consumer "Memory" feature + Auto Dream consolidation. Document-as-memory rather than extracted-fact-as-memory.
- Apple Notes + Apple Intelligence Folder + tag hierarchy + Writing Tools
Folder + tag hierarchy; iCloud sync. Writing Tools (proofread / rewrite / summarise) across all note content; audio transcription + AI summary; smart search; reminders from to-dos.
- ASAPP GenerativeAgent Long-term interaction memory + preference
Treats memory as first-class architecture. Captures the digital footprint of every interaction; retrieves preference and history at engagement time. Public example: airline knowing a frequent flyer wants aisle seats with her son — prefer…
- Botpress LLMz Vector DB + LLMz engine + KB
Per-plan vector-DB storage quota + LLMz autonomous engine (in-session working memory) + Knowledge Base (semantic search over uploaded docs). Long-term user memory persists across sessions.
- Cognigy (now NiCE Cognigy) Two-tier short + long-term, shared across agents
Acquired by NiCE (closed 2025-09-08); continues as NiCE Cognigy, standalone and inside CXone Mpower. Enterprise contact centre (voice + chat). Short-term covers current session; long-term persists across sessions and is shared by every a…
- Decagon Cross-channel conversation graph
Autonomous support agents resolving end-to-end (refunds, cancellations). Channel-agnostic memory: chat → call carries prior context. Agents recognise returning customers and recall prior issues.
- DeepScribe Longitudinal oncology pull-forward
Specialty-care ambient scribe (oncology focus). Pulls forward prior notes with precise dates; synthesises interval history (what changed since last visit); auto-populates disease-status and treatment-plan context.
- Filevine LOIS Whole-matter context as live LLM input
Embedded in case-management platform. Holds full scope of every matter — deadlines, billing, discovery, communications, negotiation history — as live context for every query. Case data is the context, not a separate retrieval corpus.
- Galileo (galileo.ai) (now Splunk Agent Observability) Real-time intent / belief drift detection
Acquired by Cisco (announced 2026-04-09, closed by 2026-05); now Splunk Agent Observability. Treats memory as first-class in multi-agent tracing. Luna-2 SLMs (3B / 8B) scan every interaction for intent drift and belief drift; 20+ checks …
- Google Gemini Memory Personal Context + Personal Intelligence
Gemini app learns from past chats via the Personal context setting (on by default, can be disabled; temporary chats excluded). Users can import memories and full chat history from ChatGPT, Claude and other assistants (18+, personal accou…
- Hippocratic AI Polaris Longitudinal multi-call patient memory store
Patient-conversation / chronic-care staffing model. HIPAA-compliant Memory Store holds non-EHR salient facts from prior calls, persists across engagements, explicitly not used for model training. Shifts from transactional call-handling t…
- Lindy AI Memory Selective KV memory injected into prompt
Memory is a file explorer for what Lindy knows: files it creates or uses, files users upload, skills (.skills/ folders with SKILL.md) and durable knowledge in a .memory/ area. Scoped Personal (owner only), Team (admins edit, members read…
- Mem0 Security / OpenMemory SOC 2 + HIPAA + zero-trust + BYOK
Commercial Mem0 ships SOC 2 / HIPAA, zero-trust access controls, BYOK encryption, real-time monitoring, audit logs and workspace governance as defaults (Trust Center at trust.mem0.ai). For privacy-first deployments the self-hosted path i…
- Microsoft Copilot Memory Org / tenant-scoped (Exchange-backed)
Microsoft 365 Copilot memory (saved memories, chat-history details, custom instructions) stored in a hidden folder of the user's Exchange mailbox under mailbox compliance; on by default, admin-controllable; available to Copilot Chat user…
- Microsoft Edge Copilot Mode + Journeys (now Copilot in Edge) Tab-context + Journeys session-grouping
Copilot Mode retired 2026-05-13; its features now ship as Copilot in Edge. Journeys clusters browsing history into topic cards on the new tab page (desktop, and US mobile); Copilot long-term memory can reference past chats and browsing h…
- Nabla + Navina Ambient + historical real-time reconciliation
Ambient scribe + longitudinal clinical intelligence (strategic partnership Jul 2025). Live encounter transcript reconciled against historical labs/imaging/notes; condition-suspecting + care-gap engine runs against the reconciled record.
- Notion AI Workspace-scoped context + custom instructions
Notion's first-party AI. Reads up to 50 pages per query (as of Jan 2026); Custom Instructions persist brand voice / team structure / preferences. Context follows you across model swaps. Notably not persistent cross-session learning — it …
- Omi Open-source wearable orb + memory graph
Wearable orb (necklace or clip) with open-source hardware + firmware. Continuous audio capture; real-time GPT-4o transcription; searchable memory graph. Supports app screen capture too. Hybrid privacy: cloud by default (SOC 2/HIPAA/AES-2…
- OpenAI ChatGPT Memory User-scoped persistent facts
First-party ChatGPT memory combining saved memories, reference to past chats, custom instructions and connected apps; 'improved memory' keeps an evolving summary (legacy list-style saved memories still selectable), with review/correct/de…
- OpenAI Codex (cloud agent) File-backed ~/.codex/memories + Chronicle
Memory under ~/.codex/memories/ : summaries, durable entries, recent-input logs, supporting evidence — generated in background after sessions go idle. Chronicle (opt-in macOS preview) uses screen-capture to seed memory. Off by default; o…
- Otter.ai Meeting bot + browser extension + app
Joins Zoom / Meet / Teams as a meeting bot. Real-time transcription, speaker identification, searchable archive across past meetings. SSO + admin controls at Business tier.
- Perplexity Comet Conversation across pages + browser-history memory
AI-native Chromium-based browser. Assistant operates across tabs and sessions; persistent memory of preferences; multi-step agentic tasks without leaving the browser. Memory is opt-in and server-side; enterprise memory tier separately av…
- Perplexity Memory Auto-distillation across model swaps
Stores preferences and details (and optionally search history) to personalize answers, citing which memory was used; user controls in Settings → Memory. 'Brain' adds structured self-improving memory for Max subscribers and shared project…
- Plaud NotePin Magnetic clip-on + AI transcription
Magnetic clip-on wearable. Records in-person conversations and calls; AI summaries, action items, searchable transcripts. AES-256 + TLS 1.2 in transit; doesn't retain audio after transcription. Also sells Note (card-form recorder) and No…
- Read.ai Meeting bot + analytics + Ada digital twin
Meeting bot + browser extension. Captures audio + video; engagement scoring (talk-time, sentiment, attention); enterprise search across all past meetings. "Ada" digital-twin feature builds an AI memory of work patterns.
- Sierra Unified customer graph (Agent Data Platform)
Bret Taylor + Clay Bavor. Agent Data Platform links unstructured conversation data to enterprise systems (billing, inventory, policies, transactions); persists across channels and time. Memory accumulates across every interaction, not ju…
- Suki AI Pre-visit summary + prior-note synthesis
Doctor-assist ambient documentation. Pulls forward prior documentation into a pre-visit synthesis rather than waiting for the encounter. Patient summaries surface relevant insight from history before visit begins.
- Voiceflow Memory Sliding-window buffer (vf_memory)
Agent platform. Keeps a configurable window of recent turns (default 50, range 10–100) in the {vf_memory} variable; older turns are summarized rather than dropped. Chat projects can persist history indefinitely or clear it on tab close/r…
- Zep — governance posture Bi-temporal KG = structural provenance
Bi-temporal knowledge graph preserves full lineage of every stored fact — every memory write traceable and auditable by graph schema, not bolted-on logging. SOC 2 Type II; HIPAA BAA available; BYOK + VPC-isolated deployment for data resi…
Tier 2 — production-ready (15)
- LangGraph Persistence Checkpoints + Store System
Distinct from LangMem. Built-in checkpointer saves graph state per super-step (short-term, thread-scoped). Store System adds long-term hierarchical key-value memory across threads with optional vector search + TTL. Postgres / Mongo / Red…
- AWS Bedrock AgentCore Memory Managed memory in Bedrock AgentCore
AWS managed memory service for agents running on Bedrock AgentCore. Native integrations with LangChain/LangGraph and Strands. Drives long-running MCP servers + agent workloads.
- AutoGen Memory List + teachable vectors
AutoGen's memory layer: ListMemory chronological context plus teachable agents that vectorise corrections; integrates with Mem0/Zep rather than building deep memory natively. Microsoft AutoGen is in maintenance mode (community managed, b…
- Semantic Kernel Memory Memory plugin for SK agents
Microsoft Semantic Kernel's memory plugin (Microsoft.SemanticKernel.Plugins.Memory): a plug-in approach to long-term memory in the SK agent framework (agent memory marked experimental). Semantic Kernel's README names Microsoft Agent Fram…
- Vertex AI Memory Bank (now Agent Platform Memory Bank) Managed Vertex memory service
Google Cloud managed memory service, now 'Agent Platform Memory Bank' in Gemini Enterprise Agent Platform. LLM-based memory extraction/consolidation from sessions (background, multimodal, custom topics), per-identity isolation, similarit…
- Google ADK Memory SessionService tiers + VertexAIMemoryBank
Google's Agent Development Kit. Session services: InMemory / Database / VertexAI. Long-term: InMemoryMemoryService or VertexAIMemoryBankService (uses Vertex AI Memory Bank Preview for persistent cross-session memory).
- Hyperspell Workplace agent memory connectors
YC F25 'company brain': connects 50+ sources (Slack, Gmail, Notion, Drive...) into a permission-aware context graph served to agents via API/SDK, returning structured results or LLM-ready summaries; learns from queries over time.
- Intercom Fin CRM attributes + roadmap lifecycle memory
CX support. Currently CRM-backed customer attributes + conversation history lookup. Lifecycle-persistent memory ("priorities learned day one considered in year 10") on roadmap as of Pioneer 2025 — not yet shipped.
- LangMem (LangChain) Episodic / semantic / procedural
First-class memory module inside LangChain — explicit cognitive-science-style typing of memories.
- OpenAI Agents SDK Memory Sessions + RunContextWrapper + categorised long-term
OpenAI's agent SDK. Sessions for working context within an agent loop; RunContextWrapper for structured persistent state. April 2026 update added categorised long-term memory: project / user / policy. Long-term tier typically backed by e…
- Pydantic-AI + Hindsight External memory bolted on
Pydantic-AI ships no native persistent memory; agents start fresh each run. Long-term memory typically added via third-party integration (e.g. Hindsight) using tools + auto-injected memory instructions.
- Retell AI In-call + integration-based long-term
Voice agents. Short-term context within call native; long-term memory via webhook integration to CRM / external DB. Cross-agent memory sharing in multi-agent setups.
- Stack AI Enterprise-KB RAG (no agent memory store)
Acquired by Asana (completed 2026-05-28); continues as its own product and brand. Connects enterprise knowledge sources (SharePoint, Confluence, Notion, Drive, DBs) as memory layer with access controls, versioning, citations. Agents quer…
- Strands Agents Memory (AWS) Mem0 + AgentCore-backed
AWS code-first agent framework. Multi-LLM (Bedrock, Anthropic, Gemini, OpenAI). Memory via Mem0 integration (ElastiCache for Valkey + Neptune Analytics) or Bedrock AgentCore Memory. Local default uses FAISS; OpenSearch for production.
- Vapi (voice agents) Structured workflow state during call
Voice agents. Externalises memory from LLM into structured call state — variables rather than model recall — reducing hallucinations. Squad mode passes context across multi-agent assistant hand-offs in same call.
Tier 3 — emerging (3)
- Spring AI ChatMemory Advisor-pattern Java-native memory
Wraps conversation memory behind an Advisor abstraction. MessageWindowChatMemory default 20-msg sliding window (preserves system messages); pluggable ChatMemoryRepository backends (in-memory, JDBC, Cassandra, Neo4j). Memory injected as c…
- Anthropic Managed Agents — Memory Filesystem-backed cross-session persistent memory
Public-beta memory stores for Claude Managed Agents: workspace-scoped collections of text documents mounted into the session sandbox as a directory the agent reads and writes with its file tools; every change is versioned for audit and p…
- Pydantic-AI MemoryTool Tool-delegated to model provider
Pydantic AI Harness ships a Memory capability: a MEMORY.md notebook plus extra Markdown notes, exposed via write/read/delete/search memory tools and auto-injected into context; backends InMemory, File, SQLite, Postgres with per-user name…