Most AI compliance starts with the platform. We start with the team.
Three Gates is the AI control plane for regulated industries, built by Hearth and Alloy, Inc., a Tennessee corporation. Patent-pending three-gate architecture, designed for organizations where “we’ll figure it out” is not an answer.
The company behind the product
Three Gates is the first product of Hearth and Alloy, Inc., a Tennessee corporation building AI control-plane infrastructure for regulated industries. Healthcare is our initial market; the same three-gate architecture extends to government and legal verticals on the roadmap. The platform is vendor-independent by design.
The patent-pending architecture rests on a single discipline: detected sensitive content is replaced with typed semantic tokens before any general-purpose AI model is invoked, and the decision is recorded per request. Every AI request passes through three sequential gates that classify the data, evaluate the user’s authority, and route to a compliant destination, with an immutable audit trail behind every decision. The platform is designed to support HIPAA Security Rule obligations today; SOC 2 Type II audit is planned, customer-engagement-gated.
For a deeper view of the corporate platform and our positioning across regulated industries, see the parent company at hearthandalloy.com.
Keith Williams
Founder
17+ years building secure data systems
Founder’s Perspective
Start with the team, not the tool.
AI adoption in regulated industries fails at the people layer long before it fails at the platform layer. Most healthcare organizations do not actually know what their teams would do with a ChatGPT tab open and a patient chart on the other screen. They have policies. They have training modules. They do not have measurement.
That is why Three Gates opens two doors. The free readiness assessment shows an organization where its workforce is already exposed, with regulatory citations attached. The control plane is what closes the gap at runtime. Most organizations need the first before they will believe they need the second.
“Measure the team first. Earn the platform conversation second.”
Designed to support HIPAA. SOC 2 Type II audit planned, customer-engagement-gated. Patent-pending three-gate architecture. Configurable audit retention. Customer-managed encryption keys for stored work product. Submitted to the HL7 AI Challenge, 2026. Read what we built.
Three ways to start.
Pick the door that matches where your organization is today.
Free
Take the AI readiness assessment.
A free, healthcare-specific assessment that produces an anonymized organizational readiness report with evidence-based remediation guidance.
See the platform
Request a platform demo.
A working walkthrough of the three-gate pipeline against scenarios from your environment. Tailored to your vertical and your stack.
Founder access
Apply to the Design Partner Program.
A small number of regulated organizations help shape Three Gates pre-GA. Preferred pricing, roadmap influence, and direct access to the founding team.