Amhage builds AI platforms that read the hardest operational data in healthcare, infrastructure, and industry, then return an answer someone can defend. Not another queue of alerts.
Medical imaging solved a hard problem decades ago: take an overwhelming stream of raw data, structure it, compare it against priors, and hand a specialist a defensible read. We apply that same discipline to security telemetry, industrial inspection, aerial capture, and sensitive data.
Every signal becomes a study with an identity, a history, and a chain of custody. Nothing is a disposable log line.
Change is the finding. Our platforms hold the previous read alongside the current one and quantify what moved.
Graded findings, explained AI, and reports built to survive an auditor, a regulator, or opposing counsel.
Four platforms in the family today, three of them shipping and one arriving in September. Each one owns a vertical end to end.
Live now
Radiology solved this problem for the human body forty years ago. InspectryxIQ applies the same architecture to welds, pipes, culverts, blades, and bridges, so an NDT firm or an asset owner works from one archive instead of a folder of JPEGs and a spreadsheet nobody trusts.
Every inspection becomes a study with an accession number, its priors, and a permanent place in the archive. Radiography, ultrasonic, CCTV, and visual all land in the same record.
A controlled observation vocabulary per modality: PACP codes for CCTV, ultrasonic wall-loss and pitting terms, AWS and API weld discontinuities, AASHTO concrete terms. Remaining wall percentage and crack width are recorded as numbers, not prose.
Say "crack at twelve metres, grade three, width two millimetres" and it becomes a coded draft finding. Deliberately not a language model, a deterministic parser over the vocabulary, so it behaves identically on a sealed network with zero external calls.
An installable app that caches the worklist before you lose signal. Capture findings, photos, and voice notes underground or in a tank, then sync when you surface. Hashes and custody hold, so evidence certificates still verify.
Bridges carry the SNBI federal element dictionary with condition states CS1 through CS4 and quantities that must sum or the submission is rejected. Facade ordinances carry New York, Chicago, Boston and Philadelphia, each with its own citation, cycle, inspector credential and filing deadline. Asbestos carries AHERA, NESHAP and New York ICR 56.
Degradation rate and projected time-to-critical by least squares. Deterioration cohorts fit across the archive by asset type, material, and install decade, so an asset with a single inspection inherits a flagged prior and the budget conversation works from study one.
The inspection record becomes a funded repair plan, each asset landing in the year the math says, with the cost of deferring three years spelled out. One click assembles the submission-ready grant exhibit with verification links for every sealed report.
Firms delivering into your lanes get a scorecard computed from recorded facts: acceptance rate, clean-file rate, review turnaround. The rubric is printed on screen, because grading someone with hidden math is how you lose contractors.
SHA-256 on every frame, a full custody log, and a signed manifest that re-verifies the moment the page loads. Built to survive a dispute rather than explain one away.
Live now
A dental office or a behavioral health practice has the same HIPAA obligations as a hospital and none of the staff. NeuryxIQ gives them a security operations centre that runs itself, ranks what actually matters, and keeps the compliance evidence current instead of scrambling for it the week an auditor calls.
Tier 1 triage, investigation and response, and threat hunting, each with a named specialist and an escalation path that ends with a human. Yours.
Watches CISA KEV and the NVD, matches each new CVE to the software you actually run, writes YARA and Sigma for it, compile-validates the rule, and waits for your approval.
Risk prioritization fuses severity, exposure, and asset value, so the queue is a decision list a practice manager can work through, not a firehose.
The annual Security Risk Assessment generated from live posture, plus the cyber-insurance readiness answer carriers now demand before they will write the policy.
HIPAA, PCI, NIST, CIS, and ISO scored and mapped, with drift alerts the moment you fall out of compliance rather than a surprise at audit time.
Twenty-two adoptable policy templates, staff attestation tracking, and a one-click audit binder holding everything an auditor will ask for.
Every screen below is a live capture from a running Amhage platform.
Each asset lands in the year the math says, with the cost of deferring three years spelled out for the council.
SHA-256 chain of custody with a signed manifest, built to survive a dispute rather than explain one away.
The AI threat team watches CISA KEV and the NVD, writes YARA and Sigma for what you actually run, and waits for your approval.
Tier 1 triage, investigation and response, and threat hunting, each with a named specialist and a clear escalation path.
Live now
A single flight produces thousands of frames and no conclusions. AeryxIQ treats the asset as the patient and the flight as the study, so media becomes a geolocated mission with priors, terrain analysis, and a short list of graded findings a decision can be made from.
A CT scanner does not sign in with a username. It holds a credential, pulls the worklist, acquires, and pushes the study back. Capture devices work the same way: a scoped, revocable key for a laptop, an aircraft, or a dock, revoked instantly and optionally bound to one structure.
A capture agent watches a folder, waits for the card to finish copying, and uploads. It reads each frame’s GPS, decides which asset it belongs to, and files the study. It never deletes anything, and it tracks what it has sent by file content, because DJI restarts numbering at 0001 on every card.
What is due to be flown, as distinct from what is due to be read. Ranked overdue, due, scheduled, unscheduled, with what the last study found on every row so a pilot knows what to look at again before take-off. Assets with no coordinates are flagged, because those can never file themselves.
New York’s Facade Inspection Safety Program puts every building over six storeys on a five-year cycle, filed with the Department of Buildings and classified safe, SWARMP or unsafe. Chicago, Boston and Philadelphia run comparable ordinances. The tooling in the field today is spreadsheets and PDFs, read from a dark reading room with hanging protocols borrowed from radiology.
The best matching prior frame is warped into the current frame’s geometry and stacked underneath an opacity slider. Hold a key to flicker between them. Structures stay put and real change moves.
One button cuts an elevation model for the ground under the study out of the USGS 3D Elevation Program. Contours, hillshade, slope, flow paths, ponding, and discharge points follow. No survey, no GeoTIFF, no photogrammetry run.
Every finding carries a zone from a curated vocabulary of 684 components across 62 asset types. Blade two leading edge. Pier three bearing. A component defect map flags a zone hit across more than one study, and fleet penetration turns one cracked blade root into eleven of forty.
Dictation transcribes server-side and folds into the summary. The report draft is composed from the study’s own record, findings by grade and category, top items, condition trend, so the words in the report trace to the data underneath them.
SHA-256 custody and a signed manifest, identical to the rest of the family, plus stockpile volumetrics and IEC 62446-3 reporting for solar.
Launching September 2026
Most practices cannot answer the simplest question an auditor asks: where is the patient data. N.IQ DLP answers it. It discovers where PHI, identity, and payment data actually live, classifies each hit with AI that explains its reasoning, and hands the result straight to the NeuryxIQ compliance record.
Eighteen detectors across PHI, PII, PCI, financial, and credential data, installed in one click rather than authored from scratch.
Luhn, NPI, DEA, ABA, SSN, and Medicare MBI check digits are actually computed. A validated hit scores 0.99, a bare pattern match scores 0.6, and you can see which is which.
Reads the words around each match. An MRN sitting beside patient and date of birth gets boosted, a number beside invoice gets downgraded, and the reason is written in plain language.
Paste content or upload a set. Findings persist to the same store the dashboard and the console both read, so nothing lives in one screen only.
You cannot protect what you cannot find. N.IQ DLP maps where sensitive data actually lives across a practice before anyone talks about controls.
Every finding becomes evidence in the NeuryxIQ HIPAA posture, so discovery and audit are one workflow instead of two.
Every frame in these is the live product on a real tenant. Each film opens on its own platform site, next to the pricing and the sign-up.
InspectryxIQ
1:48
Water and wastewater, civil and structural, mechanical integrity, power and utilities. Thirty-nine asset types, twenty-two methods, one grading scale.
Watch on inspectryxiq.com →
NeuryxIQ
2:00
Recorded from a live NeuryxIQ tenant. HIPAA posture, the detection pipeline, and an AI SOC organised the way a security team actually is.
Watch on neuryxiq.com →
AeryxIQ
2:30
Two and a half minutes across nine drone verticals. Flight studies, overlay compare, terrain screening, graded findings.
Watch on aeryxiq.com →
InspectryxIQ
1:54
They grade the video. We keep the record. Condition intelligence, the capital plan deferral penalty, evidence integrity, and the delivery exchange.
Watch on inspectryxiq.com →New York’s Facade Inspection Safety Program alone covers roughly 16,000 buildings on a five-year cycle, filed with the Department of Buildings. Chicago, Boston and Philadelphia run their own ordinances with their own vocabularies and deadlines. Each is now a package inside InspectryxIQ and AeryxIQ, including the rule that forbids filing the same condition unrepaired cycle after cycle.
inspectryxiq.com →AHERA, NESHAP and New York ICR 56, with the seven federal assessment categories as a coded vocabulary and the three-year re-inspection treated as what it is, a comparison against the prior. Built because the failures that reached a federal courtroom in 2025 were failures to prove an inspection happened, not failures to find asbestos.
inspectryxiq.com →InspectryxIQ and AeryxIQ both ship TOTP, written against the standard library rather than a dependency so the RFC 6238 published test vectors can be checked directly. Alongside it: session tokens out of URLs, a backend that refuses to start on a weak signing key, and nightly backups that now leave the machine they are backing up, into object-locked storage.
aeryxiq.com →An installable field kit caches the worklist before the crew loses reception. Findings, photos, and voice notes are captured underground or inside a tank and sync on the way out, with hashes and custody intact so the evidence certificate still verifies.
inspectryxiq.com →Capture devices now hold a revocable credential, pull the flight worklist, and push the study back, the way an imaging modality has always worked. Put the card in and the studies file themselves against the right asset by GPS.
aeryxiq.com →InspectryxIQ speaks SNBI: around sixty federal elements with condition states CS1 through CS4, quantities that must sum or the submission is rejected, and an element-level CSV in the format a DOT actually asks for.
inspectryxiq.com →The drone PACS is deployed and serving over HTTPS. Geolocated flight studies, terrain and water screening, change detection, and graded findings, all in production.
aeryxiq.com →NeuryxIQ expands into data loss prevention, with AI-assisted classification that explains every decision before sensitive data can leave the practice.
The inspection PACS is now serving pilot customers over secure HTTPS with multi-tenant onboarding.
inspectryxiq.com →Amhage incorporates in New York as the parent company of the IQ platform family, headquartered in Rochester.
A self-service readiness assessment scores a practice in minutes and maps the gaps that matter most.
Take the assessment →The concept took shape in 2020, inside two decades of medical imaging work. Six years later it became a company, and the next platform is already in the lab.
Michael has spent more than 25 years in enterprise IT and software development, leading cloud, cybersecurity, and AI programs for global technology organizations. For nearly two decades of that career he worked at the heart of medical radiology PACS, the imaging platforms hospitals trust to turn scans into answers that change treatment.
The idea was born in 2020. It took six years, and a great deal of nights and weekends, to bring it to life. Amhage was incorporated in 2026 on the conviction formed in that PACS work. If diagnostic-grade software can protect a patient, it can protect a power grid, a pipeline, and a practice. Every Amhage platform applies that same rigor to a new critical industry.
Michael graduated from the University of Oxford, where he went on to pursue postgraduate studies in Software Engineering.
The NeuryxIQ HIPAA readiness assessment scores your practice in minutes and shows the findings that matter most. No sales call required.
Built on Amazon Web Services in US regions, on HIPAA-eligible services under an executed Business Associate Addendum. Every tenant is provisioned in isolation, not as a row in someone else's database.
Encrypted in transit and at rest with customer-managed KMS keys. Least-privilege access boundaries per tenant, and a privileged path separate from the one that writes.
SHA-256 on every frame, a full custody log, and a signed manifest re-verified on load. Built to survive a dispute rather than explain one away.
Daily and hourly snapshots to versioned, cross-region storage, with point-in-time restore and periodic restore testing. Your record does not depend on one machine staying up.
Amazon Web Services and AWS are trademarks of Amazon.com, Inc. or its affiliates. Reference here describes the infrastructure Amhage platforms run on and does not imply affiliation, sponsorship, or endorsement.