HIPAA compliant agent memory systems

Agent memory systems suitable for protected health information workloads — HIPAA-aware vendors that sign BAAs. Ranked by maturity tier.

56 systems match this filter

Tier 1 — battle-tested (38)

  • Mem0 Vector + graph + KV (hybrid)

    Universal memory layer for AI agents. Three concurrent stores (vector + graph + KV); LLM-extracted facts; concurrent retrieval via ThreadPoolExecutor.

  • Langfuse Memory ops as named spans + Agent Graphs

    Acquired by ClickHouse (2026-01-16); product and MIT-licensed repo continue under the Langfuse name. Memory module reads/writes captured as named spans. Trace Log View concatenates every agent step including memory ops. Agent Graphs (GA …

  • LangSmith Memory mutations as distinct span types

    Memory reads, vector DB retrievals, state changes are distinct span types in traces. RAG eval separates retrieval quality (context precision) from generation quality (faithfulness). Dataset versioning guards against eval drift.

  • Zep & Graphiti Bi-temporal knowledge graph

    Bi-temporal knowledge graph (event time + ingestion time). Strong on chronological reasoning and contradiction tracking. Graphiti is the open-source core.

  • Browserbase Programmatic session persistence (dev infra)

    Cloud browser infrastructure for AI agents. Headless Chromium sessions with persistent cookies, localStorage, session recording — agent workflows carry state across runs. Memory at the session/automation tier rather than conversational.

  • Lakera Guard / Lakera Red Real-time prompt-injection + poisoning screen

    Acquired by Check Point Software (completed by 2025-11-11); being folded into Check Point's AI security platform. Screens every prompt, response, and retrieved document for indirect prompt injection — primary vector for memory poisoning.…

  • Supermemory Memory graph + extraction + RAG

    Memory engine with API, app, browser extension, and MCP server. Extracts facts, tracks updates, resolves contradictions, auto-forgets expired info. Plugins for Claude Code, OpenCode, OpenClaw, Hermes.

  • Augment Code Real-time semantic Context Engine + curated Agent Memory

    Real-time knowledge graph indexed from connected repos + commit history + CI/CD + tickets + docs. Separate Agent Memory layer (Sept 2025) captures session decisions/corrections/goals as discrete items with developer review/approval UI. M…

  • Abridge Grounded-transcript provenance

    Clinician-assist ambient documentation. Source mapping: every AI-generated summary element traced back to the source utterance. Audit-and-trust layer over episodic memory. Built on proprietary 1.5M+ medical-encounter dataset.

  • Anthropic Claude Memory File-backed + tool-driven + Auto Dream

    Memory tool API + consumer "Memory" feature + Auto Dream consolidation. Document-as-memory rather than extracted-fact-as-memory.

  • Apple Notes + Apple Intelligence Folder + tag hierarchy + Writing Tools

    Folder + tag hierarchy; iCloud sync. Writing Tools (proofread / rewrite / summarise) across all note content; audio transcription + AI summary; smart search; reminders from to-dos.

  • ASAPP GenerativeAgent Long-term interaction memory + preference

    Treats memory as first-class architecture. Captures the digital footprint of every interaction; retrieves preference and history at engagement time. Public example: airline knowing a frequent flyer wants aisle seats with her son — prefer…

  • Botpress LLMz Vector DB + LLMz engine + KB

    Per-plan vector-DB storage quota + LLMz autonomous engine (in-session working memory) + Knowledge Base (semantic search over uploaded docs). Long-term user memory persists across sessions.

  • Cognigy (now NiCE Cognigy) Two-tier short + long-term, shared across agents

    Acquired by NiCE (closed 2025-09-08); continues as NiCE Cognigy, standalone and inside CXone Mpower. Enterprise contact centre (voice + chat). Short-term covers current session; long-term persists across sessions and is shared by every a…

  • Decagon Cross-channel conversation graph

    Autonomous support agents resolving end-to-end (refunds, cancellations). Channel-agnostic memory: chat → call carries prior context. Agents recognise returning customers and recall prior issues.

  • DeepScribe Longitudinal oncology pull-forward

    Specialty-care ambient scribe (oncology focus). Pulls forward prior notes with precise dates; synthesises interval history (what changed since last visit); auto-populates disease-status and treatment-plan context.

  • Filevine LOIS Whole-matter context as live LLM input

    Embedded in case-management platform. Holds full scope of every matter — deadlines, billing, discovery, communications, negotiation history — as live context for every query. Case data is the context, not a separate retrieval corpus.

  • Galileo (galileo.ai) (now Splunk Agent Observability) Real-time intent / belief drift detection

    Acquired by Cisco (announced 2026-04-09, closed by 2026-05); now Splunk Agent Observability. Treats memory as first-class in multi-agent tracing. Luna-2 SLMs (3B / 8B) scan every interaction for intent drift and belief drift; 20+ checks …

  • Google Gemini Memory Personal Context + Personal Intelligence

    Gemini app learns from past chats via the Personal context setting (on by default, can be disabled; temporary chats excluded). Users can import memories and full chat history from ChatGPT, Claude and other assistants (18+, personal accou…

  • Hippocratic AI Polaris Longitudinal multi-call patient memory store

    Patient-conversation / chronic-care staffing model. HIPAA-compliant Memory Store holds non-EHR salient facts from prior calls, persists across engagements, explicitly not used for model training. Shifts from transactional call-handling t…

  • Lindy AI Memory Selective KV memory injected into prompt

    Memory is a file explorer for what Lindy knows: files it creates or uses, files users upload, skills (.skills/ folders with SKILL.md) and durable knowledge in a .memory/ area. Scoped Personal (owner only), Team (admins edit, members read…

  • Mem0 Security / OpenMemory SOC 2 + HIPAA + zero-trust + BYOK

    Commercial Mem0 ships SOC 2 / HIPAA, zero-trust access controls, BYOK encryption, real-time monitoring, audit logs and workspace governance as defaults (Trust Center at trust.mem0.ai). For privacy-first deployments the self-hosted path i…

  • Microsoft Copilot Memory Org / tenant-scoped (Exchange-backed)

    Microsoft 365 Copilot memory (saved memories, chat-history details, custom instructions) stored in a hidden folder of the user's Exchange mailbox under mailbox compliance; on by default, admin-controllable; available to Copilot Chat user…

  • Microsoft Edge Copilot Mode + Journeys (now Copilot in Edge) Tab-context + Journeys session-grouping

    Copilot Mode retired 2026-05-13; its features now ship as Copilot in Edge. Journeys clusters browsing history into topic cards on the new tab page (desktop, and US mobile); Copilot long-term memory can reference past chats and browsing h…

  • Nabla + Navina Ambient + historical real-time reconciliation

    Ambient scribe + longitudinal clinical intelligence (strategic partnership Jul 2025). Live encounter transcript reconciled against historical labs/imaging/notes; condition-suspecting + care-gap engine runs against the reconciled record.

  • Notion AI Workspace-scoped context + custom instructions

    Notion's first-party AI. Reads up to 50 pages per query (as of Jan 2026); Custom Instructions persist brand voice / team structure / preferences. Context follows you across model swaps. Notably not persistent cross-session learning — it …

  • Omi Open-source wearable orb + memory graph

    Wearable orb (necklace or clip) with open-source hardware + firmware. Continuous audio capture; real-time GPT-4o transcription; searchable memory graph. Supports app screen capture too. Hybrid privacy: cloud by default (SOC 2/HIPAA/AES-2…

  • OpenAI ChatGPT Memory User-scoped persistent facts

    First-party ChatGPT memory combining saved memories, reference to past chats, custom instructions and connected apps; 'improved memory' keeps an evolving summary (legacy list-style saved memories still selectable), with review/correct/de…

  • OpenAI Codex (cloud agent) File-backed ~/.codex/memories + Chronicle

    Memory under ~/.codex/memories/ : summaries, durable entries, recent-input logs, supporting evidence — generated in background after sessions go idle. Chronicle (opt-in macOS preview) uses screen-capture to seed memory. Off by default; o…

  • Otter.ai Meeting bot + browser extension + app

    Joins Zoom / Meet / Teams as a meeting bot. Real-time transcription, speaker identification, searchable archive across past meetings. SSO + admin controls at Business tier.

  • Perplexity Comet Conversation across pages + browser-history memory

    AI-native Chromium-based browser. Assistant operates across tabs and sessions; persistent memory of preferences; multi-step agentic tasks without leaving the browser. Memory is opt-in and server-side; enterprise memory tier separately av…

  • Perplexity Memory Auto-distillation across model swaps

    Stores preferences and details (and optionally search history) to personalize answers, citing which memory was used; user controls in Settings → Memory. 'Brain' adds structured self-improving memory for Max subscribers and shared project…

  • Plaud NotePin Magnetic clip-on + AI transcription

    Magnetic clip-on wearable. Records in-person conversations and calls; AI summaries, action items, searchable transcripts. AES-256 + TLS 1.2 in transit; doesn't retain audio after transcription. Also sells Note (card-form recorder) and No…

  • Read.ai Meeting bot + analytics + Ada digital twin

    Meeting bot + browser extension. Captures audio + video; engagement scoring (talk-time, sentiment, attention); enterprise search across all past meetings. "Ada" digital-twin feature builds an AI memory of work patterns.

  • Sierra Unified customer graph (Agent Data Platform)

    Bret Taylor + Clay Bavor. Agent Data Platform links unstructured conversation data to enterprise systems (billing, inventory, policies, transactions); persists across channels and time. Memory accumulates across every interaction, not ju…

  • Suki AI Pre-visit summary + prior-note synthesis

    Doctor-assist ambient documentation. Pulls forward prior documentation into a pre-visit synthesis rather than waiting for the encounter. Patient summaries surface relevant insight from history before visit begins.

  • Voiceflow Memory Sliding-window buffer (vf_memory)

    Agent platform. Keeps a configurable window of recent turns (default 50, range 10–100) in the {vf_memory} variable; older turns are summarized rather than dropped. Chat projects can persist history indefinitely or clear it on tab close/r…

  • Zep — governance posture Bi-temporal KG = structural provenance

    Bi-temporal knowledge graph preserves full lineage of every stored fact — every memory write traceable and auditable by graph schema, not bolted-on logging. SOC 2 Type II; HIPAA BAA available; BYOK + VPC-isolated deployment for data resi…

Tier 2 — production-ready (15)

  • LangGraph Persistence Checkpoints + Store System

    Distinct from LangMem. Built-in checkpointer saves graph state per super-step (short-term, thread-scoped). Store System adds long-term hierarchical key-value memory across threads with optional vector search + TTL. Postgres / Mongo / Red…

  • AWS Bedrock AgentCore Memory Managed memory in Bedrock AgentCore

    AWS managed memory service for agents running on Bedrock AgentCore. Native integrations with LangChain/LangGraph and Strands. Drives long-running MCP servers + agent workloads.

  • AutoGen Memory List + teachable vectors

    AutoGen's memory layer: ListMemory chronological context plus teachable agents that vectorise corrections; integrates with Mem0/Zep rather than building deep memory natively. Microsoft AutoGen is in maintenance mode (community managed, b…

  • Semantic Kernel Memory Memory plugin for SK agents

    Microsoft Semantic Kernel's memory plugin (Microsoft.SemanticKernel.Plugins.Memory): a plug-in approach to long-term memory in the SK agent framework (agent memory marked experimental). Semantic Kernel's README names Microsoft Agent Fram…

  • Vertex AI Memory Bank (now Agent Platform Memory Bank) Managed Vertex memory service

    Google Cloud managed memory service, now 'Agent Platform Memory Bank' in Gemini Enterprise Agent Platform. LLM-based memory extraction/consolidation from sessions (background, multimodal, custom topics), per-identity isolation, similarit…

  • Google ADK Memory SessionService tiers + VertexAIMemoryBank

    Google's Agent Development Kit. Session services: InMemory / Database / VertexAI. Long-term: InMemoryMemoryService or VertexAIMemoryBankService (uses Vertex AI Memory Bank Preview for persistent cross-session memory).

  • Hyperspell Workplace agent memory connectors

    YC F25 'company brain': connects 50+ sources (Slack, Gmail, Notion, Drive...) into a permission-aware context graph served to agents via API/SDK, returning structured results or LLM-ready summaries; learns from queries over time.

  • Intercom Fin CRM attributes + roadmap lifecycle memory

    CX support. Currently CRM-backed customer attributes + conversation history lookup. Lifecycle-persistent memory ("priorities learned day one considered in year 10") on roadmap as of Pioneer 2025 — not yet shipped.

  • LangMem (LangChain) Episodic / semantic / procedural

    First-class memory module inside LangChain — explicit cognitive-science-style typing of memories.

  • OpenAI Agents SDK Memory Sessions + RunContextWrapper + categorised long-term

    OpenAI's agent SDK. Sessions for working context within an agent loop; RunContextWrapper for structured persistent state. April 2026 update added categorised long-term memory: project / user / policy. Long-term tier typically backed by e…

  • Pydantic-AI + Hindsight External memory bolted on

    Pydantic-AI ships no native persistent memory; agents start fresh each run. Long-term memory typically added via third-party integration (e.g. Hindsight) using tools + auto-injected memory instructions.

  • Retell AI In-call + integration-based long-term

    Voice agents. Short-term context within call native; long-term memory via webhook integration to CRM / external DB. Cross-agent memory sharing in multi-agent setups.

  • Stack AI Enterprise-KB RAG (no agent memory store)

    Acquired by Asana (completed 2026-05-28); continues as its own product and brand. Connects enterprise knowledge sources (SharePoint, Confluence, Notion, Drive, DBs) as memory layer with access controls, versioning, citations. Agents quer…

  • Strands Agents Memory (AWS) Mem0 + AgentCore-backed

    AWS code-first agent framework. Multi-LLM (Bedrock, Anthropic, Gemini, OpenAI). Memory via Mem0 integration (ElastiCache for Valkey + Neptune Analytics) or Bedrock AgentCore Memory. Local default uses FAISS; OpenSearch for production.

  • Vapi (voice agents) Structured workflow state during call

    Voice agents. Externalises memory from LLM into structured call state — variables rather than model recall — reducing hallucinations. Squad mode passes context across multi-agent assistant hand-offs in same call.

Tier 3 — emerging (3)

  • Spring AI ChatMemory Advisor-pattern Java-native memory

    Wraps conversation memory behind an Advisor abstraction. MessageWindowChatMemory default 20-msg sliding window (preserves system messages); pluggable ChatMemoryRepository backends (in-memory, JDBC, Cassandra, Neo4j). Memory injected as c…

  • Anthropic Managed Agents — Memory Filesystem-backed cross-session persistent memory

    Public-beta memory stores for Claude Managed Agents: workspace-scoped collections of text documents mounted into the session sandbox as a directory the agent reads and writes with its file tools; every change is versioned for audit and p…

  • Pydantic-AI MemoryTool Tool-delegated to model provider

    Pydantic AI Harness ships a Memory capability: a MEMORY.md notebook plus extra Markdown notes, exposed via write/read/delete/search memory tools and auto-injected into context; backends InMemory, File, SQLite, Postgres with per-user name…