Risk Intelligence Infrastructure for European Health Systems
Built for GDNG compliance. Designed for clinical trust.

Built for GDNG compliance. Designed for clinical trust.
In this section, you'll find answers to common questions about our AI-driven platform and how it empowers personalized health care.
Loretta is a B2B health AI infrastructure platform that helps insurers and health systems predict chronic disease risk and target preventive interventions, without centralizing patient data.
No. Loretta is infrastructure that runs inside institutional environments (trust centres, hospital IT, insurer data centres); an optional patient-facing interaction layer can be enabled, but always under the institution's control.
Loretta helps reduce avoidable hospitalizations and long-term chronic care costs by identifying who is at risk, which interventions are likely to work, and how to allocate resources fairly across populations.
Patient data remains inside the responsible institution's secure processing environment (Trust‑Centre or equivalent); Loretta's components are deployed locally and central systems only receive aggregated, non‑identifiable parameters.
Yes. Loretta's architecture is designed around GDPR principles and GDNG requirements for secondary use of health data, including use of secure processing environments and prohibition of cross‑border raw data transfers.
No. Loretta does not move personal health data outside the responsible institution or into non‑sovereign cloud environments; this is a core design choice to meet GDNG and EHDS sovereignty requirements.
Secondary use means using health data for research, planning, and prevention rather than direct clinical care; GDNG and EHDS explicitly legalise such use under strict safeguards, and Loretta provides the technical implementation to do this safely.
We combine AI-driven solutions with a deep understanding of social and environmental factors to create tailored healthcare experiences. Our evidence-based platform is designed to eliminate stigma and provide continuous support for chronic disease management, mental health, and wellness.
Models are trained across decentralized nodes inside "Trust‑Centres" (Sichere Verarbeitungsumgebungen, SPE), so raw patient data never leaves institutional custody; only encrypted model updates are aggregated centrally.
Causal inference methods estimate the effect of an intervention (for example a diabetes management programme) rather than just correlation, allowing Loretta to model "uplift" and benchmark estimates against randomised controlled trials within about a 20% margin.
Loretta infers socioeconomic status (SES) from privacy‑preserving proxies and constrains models so that performance disparities (for example false negatives) between SES groups stay below about 5%, in line with emerging fairness research and regulatory expectations.
No. Loretta augments existing workflows with risk scores and intervention suggestions; all decisions remain under human oversight and institutional clinical governance.
EHDS requires each member state to build interoperable health data spaces and designate data access bodies; Loretta is built to run within these national infrastructures, making it easier to extend from Germany to other EU markets.
Yes. Health prediction and intervention support systems fall under the High‑Risk category, so Loretta implements required controls such as risk management, data governance, transparency, human oversight, and bias and fairness testing.
Loretta is working toward TÜV certification as a Class IIa medical device, preparing AI Act documentation, and building the evidence required for DiGA reimbursement where a patient‑facing component is involved.
A clinical randomized controlled trial is planned to demonstrate improvements in outcomes such as HbA1c and blood pressure, with all results stratified by SES to test equity.
German statutory health insurers (GKV) and large health systems are the initial focus, with expansion to other EU payers and providers as EHDS infrastructures come online.
Initial deployments target high‑burden chronic conditions such as type 2 diabetes and hypertension, with a roadmap to extend to other cardiometabolic and respiratory diseases.
Loretta connects to claims and EHR systems via standard interfaces such as HL7/FHIR and operates within existing secure processing environments, reducing the need to change institutional IT.
Yes. Through insurer or provider partnerships, Loretta can power employer health programmes using the same risk and intervention engine, with pricing aligned to per‑member‑per‑month models.
Loretta offers an optional interaction module that institutions can white‑label to deliver reminders, education, and monitoring; it is not a standalone direct‑to‑consumer app and operates entirely under institutional governance.
All messages, prompts, and recommendations delivered through the patient layer are triggered and approved under institutional clinical rules and oversight; Loretta provides the tooling, not autonomous decision‑making.
A governed patient interface can be included within a DiGA‑style pathway where appropriate; regulatory classification depends on the specific configuration and intended use agreed with the institution.
By preventing avoidable hospitalizations and complications in high‑risk chronic patients, Loretta aims to reduce per‑patient costs and address structural deficits in systems like GKV, where chronic disease accounts for most spending.
Loretta is priced as an enterprise licence per insurer or health system (annual contract value) with optional per‑member fees when a patient interaction module is deployed at scale.
Existing prevention programs in Germany show 3–5× ROI over three years; Loretta's goal is to enable similar or better returns by making prevention more targeted, timely, and equitable.
Only if your doctor, hospital, or health insurance decides to use Loretta's tools to help manage your care. Even then, your data stays with your healthcare provider and is never shared outside their secure systems. Loretta is a tool they use like a calculator not a separate company collecting your information.
Your healthcare provider or insurer will inform you if they are using Loretta to support your treatment plan. In some cases, you may receive helpful reminders or personalised health tips through an app or messages but only if your provider has set this up for you. You can always ask your care team if and how Loretta is being used.
Your healthcare provider or insurer will follow all legal requirements for consent and data protection under German and EU law (GDPR and GDNG). If you have questions about how your data is used, speak to your doctor's office or insurance representative they control all decisions about your information.