Rubrik joins health AI coalition amid cyber resilience push

Rubrik has joined the Coalition for Health AI, placing the cyber security company within a healthcare AI group of nearly 3,000 member organisations.

It joined to work with other members on cyber resilience and AI governance in healthcare, as providers manage growing volumes of sensitive data while adopting more AI tools.

CHAI is an industry-led group focused on standards and frameworks for the use of AI in health. Its membership spans health systems, patient advocates, researchers, academic institutions, start-ups, established technology suppliers and government participants.

The coalition has created working groups on privacy and security, transparency, usefulness and safety in AI systems. It has also introduced a model card registry to support the use of standardised information about health AI tools in procurement decisions.

Rubrik's entry links a cyber resilience supplier more closely to current debates over how healthcare organisations monitor, govern and recover from failures involving AI systems. The company pointed to the need for operational recovery and oversight as more clinical and administrative functions come to rely on machine learning models and automated tools.

Healthcare has become a particular focus for cyber security firms because attacks on hospitals and other care providers can disrupt treatment as well as expose confidential records. Rubrik said healthcare organisations are tasked with protecting 50% more sensitive data than the global average.

That pressure is increasing as the sector expands its use of AI. Hospitals, insurers and suppliers are deploying it across administrative workflows, diagnostics, decision support and patient engagement, raising new questions about governance, accountability and resilience when systems fail or produce flawed outputs.

Governance focus

Josh Howell, Healthcare Chief Technology Officer at Rubrik, outlined the company's case for joining the coalition.

"The potential for AI to transform healthcare is immense, but scaling it responsibly requires strict guardrails, timely operational recovery, and the ability to comprehensively monitor, govern, and rewind AI actions," said Howell.

"By joining CHAI, Rubrik is bringing our expertise to the broader health ecosystem. In collaboration with CHAI and its members, we aim to redefine cyber resilience and governance in the wake of AI, so that the next generation of health is secure," he said.

The reference to "rewind AI actions" reflects a growing concern among technology and healthcare leaders over how organisations can trace and reverse automated decisions or system actions when errors occur. In clinical settings, that can extend beyond data loss to operational disruption and patient safety.

CHAI was founded by clinicians and has positioned itself as a forum for building consensus across the health sector on responsible AI. Its work centres on practical guidance for deployment and oversight rather than product development, with a focus on trust, safety and security.

Brian Anderson, Chief Executive Officer of CHAI, welcomed Rubrik to the coalition.

"I am thrilled to welcome Rubrik to our growing community of organizations committed to advancing effective and responsible health AI," said Anderson.

"We are driven by the engagement and expertise of our members and the feedback of our broader health ecosystem and the public. We look forward to working together to unlock the potential benefits of AI, on a foundation of trust, safety, and security," he said.

Sector pressure

The move comes as healthcare providers face a difficult balancing act. They are under pressure to adopt AI tools that may improve efficiency or support care delivery, while also defending networks, securing patient records and ensuring clinical services can continue during cyber incidents.

For cyber security vendors, that creates an opening to move beyond backup and recovery into broader governance and oversight of AI-driven systems. For healthcare groups and standards bodies, it raises the question of whether existing controls are enough for systems that can act autonomously or influence medical and operational decisions.

CHAI's scale gives that discussion a broad base. It now includes nearly 3,000 organisations from across the healthcare ecosystem, bringing together operators, researchers, patient groups and technology companies around common guidance for AI use in health.

Its existing work on privacy, transparency and safety means cyber resilience is likely to become more tightly connected to debates over responsible AI, especially as health systems look for ways to document, assess and compare the models they use.

Rubrik's membership adds another technology company to that effort at a time when healthcare organisations increasingly see security, continuity and AI oversight as linked issues.