Outperforms GPT-5, GPT-4o, GPT-4.1, o3, and Gemini 3 Pro for healthcare applications while maintaining full HIPAA compliance. Purpose-built for therapy, clinical, and healthcare workflows.
// HIPAA-compliant chat completion POST https://api.bastiongpt.com/v1/ChatCompletion Content-Type: application/json Key: ab12345678901234567890123456 { "messages": [{ "role": "user", "content": "What is a normal BP?" }], "max_tokens": 1000, "temperature": 0, "user": "C0001" }
This page outlines the necessary details to integrate with the BastionGPT API, including input parameters, output structure, pricing, limitations, and usage examples. To get started, sign up for BastionGPT Plus to explore our capabilities through the same API you'll receive access to. If you have additional questions or would like to apply for access, complete the access request form or schedule a consultation to review your use case and receive your API key.
Full compliance with healthcare regulations. Patient data stays secure with enterprise-grade encryption. Your data is never sold or used to train our AI models. Licensed for secure use with PHI and PII, with OpenAI having no access to your data.
Utilizes a pool of the leading AI models, fine-tuned for healthcare and mental health professionals. Expertly trained on thousands of clinical documentation standards and clinical workflows, such as SOAP notes, prior authorizations and appeal letters.
99.9% uptime SLA, 800 requests/minute, 2M tokens/minute. Built to support the next generation of powerful healthcare applications, with multi-region deployment in US, Canada (Quebec), and Australia for data residency compliance.
500,000 token context window for detailed patient histories and complex clinical scenarios. Handle long encounters, prior auth packets, and multi-document reviews in a single call.
Medical transcription at $0.73 / hour for therapy sessions and ambient patient scribing. Built for clinical accuracy on names, medications, and dosages, without sacrificing the ability to handle accents.
Reduced consumer-style content filters so clinicians can discuss substance use, sexual health, end-of-life care, and other adult topics in a healthcare context, without dead ends.
Available in US, Canada (Quebec), and Australia for data residency compliance. Pick the region that matches your patients and regulatory footprint.
Start with a flat monthly subscription that includes credits, then pay-as-you-go beyond. No enterprise minimums.
Explore our capabilities over your 30-day developer trial through the same UI powered by the API you'll receive access to.
Schedule a 15-minute consultation or complete the access form below. Our technical and safety teams will review to confirm eligibility and ask any follow-up questions.
Get your key and full documentation shortly after the meeting, typically the same business day.
Make your first API call. Our team is on chat, email, or video whenever you'd like a hand.
One endpoint, OpenAI-style request/response shape. If you've integrated with mainstream LLM APIs before, you'll feel right at home.
The single base URL for all chat completion requests.
https://api.bastiongpt.com/v1/ChatCompletion
Send messages, get a structured chat completion back.
POST /v1/ChatCompletion HTTP/1.1 Host: api.bastiongpt.com Content-Type: application/json Key: ab12345678901234567890123456 { "messages": [{"role": "user", "content": "What is a normal BP?"}], "max_tokens": 1000, "temperature": 0, "user": "C0001" }
Familiar choices/usage shape, with a BastionGPT-specific environment field.
{
"id": "s7RzpHeOFnpM",
"created": 1709442176,
"model": "bastiongpt",
"choices": [
{
"finish_reason": "stop",
"message": {
"content": "A normal blood pressure (BP) for an adult is generally considered to be in the range of 90/60 mmHg to 120/80 mmHg..."
}
}
],
"usage": {
"prompt_tokens": 30,
"completion_tokens": 383,
"total_tokens": 413
},
"environment": "development"
}
What to send with every ChatCompletion call. Content-Type, Key, and Content are required; everything else is optional with sensible defaults.
| Parameter | Type | Required | Default | Description |
|---|---|---|---|---|
| Content-Type | string | Yes | application/json |
Specifies the media type of the resource. This is typically application/json. |
| Key | string | Yes | n/a | A unique 32-digit alphanumeric API key provided to users for authentication. |
| Function | string | No | general |
Used to specify specialty functions. As of the current version, only the general function is supported. |
| Temperature | number | No | 0.5 |
A floating-point number between 0 and 1 indicating the level of creativity desired in the response. A lower value means less creativity but increased data accuracy. |
| Content | string | Yes | n/a | The actual content or prompt you wish to submit to BastionGPT. |
| Max Tokens | number | No | 1000 |
Maximum amount of data (expressed in tokens) that BastionGPT should generate in the response. |
Every successful response returns these fields. finish_reason tells you whether the call completed normally or was blocked by content filtering.
| Parameter | Type | Default | Description |
|---|---|---|---|
| id | string | n/a | A unique identifier for the generated response. |
| created | number | n/a | A timestamp indicating when the prompt was created. |
| content | string | n/a | The generated response to the submitted prompt. |
| prompt_tokens | number | n/a | Number of tokens consumed by the prompt. |
| completion_tokens | number | n/a | Number of tokens consumed by the response. |
| total_tokens | number | n/a | Total number of tokens consumed by both the prompt and the response. |
| finish_reason | string | stop |
Indicates the status of the prompt. Normal completion is indicated by stop. A content_filter status means the content was blocked due to detection of suspected unapproved use cases. |
Submit the form and our technical and safety teams will review for eligibility. We typically respond within one business day. Prefer a live conversation? Schedule a 15-minute consultation instead.
By submitting, you agree to our Terms of Use and Privacy Policy.
Our technical and safety teams will review your submission and reply by email, typically within one business day. If your use case is a fit, we'll send your API key and documentation right after.
We prioritize the security and integrity of your data. Our API infrastructure is built with robust security measures, ensuring every interaction is protected using industry best practices.
Data in transit is protected by the latest, most secure encryption protocols. We exclusively support TLS 1.3 and TLS 1.2, disabling outdated and vulnerable protocols like SSLv3, TLS 1.0, and TLS 1.1.
Strong, authenticated cipher suites including AES-GCM (up to 256-bit) for high performance and the highest level of confidentiality and integrity for your API calls.
ECDHE key exchange ensures that even if a server's long-term private key were ever compromised, past communication sessions remain secure and cannot be decrypted.
Our API endpoint uses a certificate from GeoTrust / DigiCert, signed with a strong SHA-256 algorithm, verifying our server identity and establishing a trusted channel.
Configuration is actively hardened against known SSL/TLS vulnerabilities including BEAST, POODLE, Heartbleed, and ROBOT. We continuously monitor and update against emerging threats.
Our endpoint configuration consistently achieves a top 'A' rating from independent SSL/TLS assessment tools.
Start your trial, request access, or talk to our team. Whichever path fits, we'll have you making your first call within days, not quarters.