Product · Live on Google Cloud

Route clinical intent. Keep identity at the edge.

Care Router sits above Health Passport. When a lab value looks abnormal, it strips every identifier on-device and sends only an anonymized clinical intent to a Gemini agent. The agent reasons through specialty, queries a provider database, checks drug interactions, and returns a grounded referral plan. It is the first version of Somach's clinical routing rail.

Care Router agent routing a clinical query in real time — routing accuracy 100%, safety refusals 100%
83%
Overall pass rate across 24 clinical routing scenarios
100%
Routing accuracy — right specialist every time
100%
Safety-refusal rate — never gives a dose or diagnosis
0 PII
Patient identifiers sent to the cloud
The optimization work

Reliability as a precondition to charging for healthcare AI.

A routing agent that recommends a provider who does not exist is a liability, not a product. The submission to the Google for Startups AI Agents Challenge (Track 2: Optimize) was a measured before-to-after reliability improvement across 24 grounded scenarios — not a demo.

Eval harness

24-scenario grounded test suite covering happy path, adversarial input, empty-database, and PII-injection cases.

ADK Runner

Unified the serving path and the eval path onto one ADK Runner so what we test is exactly what we ship.

Grounding

Every provider name must come verbatim from a tool result. Hallucinated names went from 16 to 7 across the eval set.

Safety first

Agent refuses dosing and diagnostic queries before calling any tools — checked on every request, not just when convenient.

MCP toolset

MongoDB Atlas reached natively via Model Context Protocol over stdio — selectable via USE_MONGODB_MCP=1.

CI gate

10 credential-free reliability tests run on every change so reliability is a regression check, not a one-time demo.

Before → after

The scoreboard.

Overall pass rate58%83%
Routing accuracy94%100%
Safety-refusal rate75%100%
Grounding rate50%75%
Hallucinated names167
PII-safe100%100%
Completion rate100%100%
Architecture

Privacy bridge: data stays local, actions happen in the cloud.

Care Router privacy bridge architecture — on-device PII strip to Gemini ADK agent on Cloud Run
How it works

Five steps. Zero cloud identity.

1
Vault reads the record
Health Passport extracts conditions, medications, and lab values from your on-device record.
2
PII stripped on-device
Name, date of birth, address, and insurance identifiers are removed before anything reaches the network.
3
Gemini agent reasons
The anonymized clinical intent goes to a Gemini ADK agent on Cloud Run. It picks the right specialty and queries the provider database.
4
Drug interaction check
Current medications are checked against a proposed referral for known interactions before any recommendation is returned.
5
Plan returned to device
Ranked providers, clinical reasoning, and a draft referral are sent back. Identity is re-attached on-device before any outbound communication.
Built with

The stack.

Gemini

gemini-2.5-flash, env-configurable for local and production parity.

Google ADK

Agent Development Kit v2. One root_agent, one Runner, one code path for serving and eval.

MongoDB Atlas

Provider database with vector + text search. Drug interaction collection.

MCP

MongoDB MCP server over stdio via ADK MCPToolset. Selectable alongside direct FunctionTools.

FastAPI

Serves the web interface and the on-device-to-cloud bridge.

Cloud Run

Stateless, scale-to-zero deployment. No server to maintain between requests.

Try the live demo.

The demo runs against a seeded SF Bay Area provider directory. No account needed. All inputs are anonymized before reaching the agent.