Compliant AI pipelines,
drawn in minutes.

DrawLabs is a local-first visual workflow builder for regulated industries. Drag domain nodes — DICOM, FHIR, de-identification — alongside on-device LLM agents. Burst to cloud in one click. Sensitive data never leaves your org.

On-prem runtime Air-gap deploy
radiology-de-id.flow — DrawLabs Studio
RUNNING
Node library
Sources
Transforms
Guards
Agents
Sinks
Local runtime HIPAA · boundary intact
3,412 studies / hr latency 84ms v2.7.1
Product

A workflow builder that speaks compliance natively.

No glue code. No rogue cloud calls. Every node is audited, versioned, and signed. Every agent runs where your data lives.

01 /Drag domain nodes

Start from the node library: DICOM readers, FHIR resources, PHI de-identifiers, policy guards. Typed ports reject incompatible connections before runtime.

02 /Wire in local agents

Drop in LLM agents backed by your choice of on-device models. Llama, Qwen, in-house — bound to the pipeline with tool-use policies and rate limits.

03 /Run on your hardware

The DrawLabs runtime executes on-prem — your workstation, your VPC, your air-gapped cluster. Data, prompts, and model weights stay inside the boundary.

04 /Burst to cloud, selectively

One-click lift for the heavy steps — after de-identification, with per-node destination controls. Audit log captures every byte crossing the boundary.

Architecture / moat

Local-first by default.
Cloud-elastic by choice.

The runtime is a single binary. It runs on a laptop, a workstation, or a rack — with the same semantics. Bursting is a policy decision, not an architectural one.

drawlabs_runtime · topology policy-enforced boundary

On-device

runs in your boundary
Raw PHI / PII✓ stays local
De-identification✓ stays local
DICOM / FHIR I/O✓ stays local
Local LLM agents✓ stays local
Audit ledger✓ stays local
Policy engine✓ stays local

Burst targets

only when policy allows
De-identified batch inferenceopt-in
Frontier model callsper-node
GPU-heavy transformsopt-in
Destination allowlistenforced
Byte-level egress logimmutable
Zero retention contractsdefault
Domain expansion

Healthcare first.
Every regulated vertical next.

Domain nodes are the product. Each vertical ships as a signed, versioned pack — built with domain experts, audited by compliance, owned by you.

The thesis

The moat is the runtime.

Every competitor ships a cloud SaaS. We ship a local runtime that speaks compliance, with a visual builder on top. That's a different company.

0
Raw PHI bytes leaving the boundary
14
Design partners · healthcare
4
Verticals on roadmap
minutes
From blank canvas to shipped

Why now — and why us.

Frontier models got good enough to matter in regulated work. On-device inference got fast enough to run them inside the boundary. Compliance buyers are being asked to ship AI — and told they can't move the data. DrawLabs is the path through.

Read the thesis
  • 01Local runtime, inside the boundary. Once the runtime is deployed, it becomes part of the customer's compliance posture — not a vendor dependency.
  • 02Domain packs built with experts. Typed nodes for DICOM, FHIR, de-identification — shipped as signed packs, not stitched together from generic SDKs.
  • 03A canvas the compliance team can read. Visual pipelines make reviewers and builders successful at the same time.
  • 04Burst to cloud on your terms. Heavy steps can route out after de-identification — fully optional, always audited.
Alpha build

Run it on your own machine.

Free during alpha. No account. No telemetry. Workflows are files on disk. Secrets stay in your OS keychain.

DrawLabs for macOS ALPHA
Apple Silicon & Intel · macOS 12+
Downloads · live
Download .dmg
INSTALLATION
  1. 01 Download and open the .dmg
  2. 02 Drag DrawLabs to Applications
  3. 03 Before first launch, run in Terminal: xattr -cr /Applications/DrawLabs.app Alpha builds aren't yet signed — this removes the Gatekeeper quarantine flag. Apple Developer ID signing + notarization landing before public launch.
  4. 04 Open DrawLabs — set profile, pick persona, start drawing

Draw the pipeline.
Ship in a sprint.

Public alpha for individual builders. Team rollouts, SSO, and deployment support by appointment with healthcare design partners.