Perspectives

Writing from the intersection of AI and regulated industry.

Our partners write about what we are observing in healthcare AI, legal technology, and financial services automation — evidence-based, operator-informed, and focused on what compliance actually means for building durable software companies.

Articles and perspectives

Generative AI Meets the Regulatory Floor: What the 2026 Clinical AI Guidance Actually Changes

The FDA's updated framework for AI-enabled devices issued this spring is not a burden on the companies we back — it is a forcing function that separates the serious from the provisional. Here is what it means for builders.

Claire Johansson

Read

The Second Wave of Legal AI: From Research to Reasoning

The first wave of legal AI automated search. The second wave is attempting to automate judgment. Understanding the difference — and the liability implications — matters enormously for anyone building in this space.

Elliot Vasquez

Read

Ambient Documentation at Scale: What Two Years of Abridge Deployment Taught Us

Two years into the ambient clinical documentation era, the patterns are becoming legible. Physician adoption, EHR integration friction, and the economics of note generation have all surprised us in ways worth writing down.

Claire Johansson

Read

Fintech's Compliance Stack Is Not a Liability — It's an Acquisition Barrier

We have watched three portfolio companies get approached for acquisition in the past 18 months. Every serious buyer asked the same question first: how defensible is the compliance infrastructure? The answer determined the conversation that followed.

Elliot Vasquez

Read

Prior Authorization and the $54 Billion Administrative Problem

Prior authorization consumes an estimated $54 billion annually in administrative cost across US healthcare. The companies solving it are not replacing clinicians — they are removing friction from a process that currently slows down patient care while generating no clinical value.

Claire Johansson

Read

What GPT-4 Did Not Change About Enterprise Legal Tech

Two years after the generative AI inflection point, the fundamental constraint in enterprise legal technology is unchanged: trust, accountability, and defensible outputs. The technology has improved dramatically. The procurement process has not.

Elliot Vasquez

Read

Revenue Cycle AI: The Unglamorous Frontier That Matters

Revenue cycle management is not a product category that generates press coverage. It generates margin. For hospital systems operating on 2–4% operating margins, AI that reduces denial rates by 15 points is not a nice-to-have — it is a survival tool.

Daniel Ostrowski

Read

The Embedded Finance Architecture Decision Every Fintech Founder Gets Wrong

Embedded lending and payments infrastructure decisions made at Series A almost always constrain what a company can do at Series C. The compliance architecture is not plumbing — it is the foundation. Here is what we see founders getting wrong, and why.

Elliot Vasquez

Read

On Diagnosing Disease from Pixels: What Radiograph AI Needs to Get Right

Diagnostic AI in imaging has attracted extraordinary investment and extraordinary expectations. The gap between what models can do in research environments and what they can do reliably in clinical practice remains consequential. We explore what it takes to close it.

Claire Johansson

Read

FINRA's Exam Priorities Letter and What It Means for Compliance Technology Buyers

FINRA's 2024 examination priorities letter identifies surveillance deficiencies and recordkeeping gaps as top-tier concerns for the third consecutive year. For compliance technology companies, this is not a threat — it is a mandate letter.

Elliot Vasquez

Read

The Clinical AI Trust Deficit: Why Adoption Lags Development

Every conversation we have with health system CIOs includes some version of the same concern: the models may be good, but can we rely on them when something goes wrong? Trust, auditability, and clear accountability chains are the actual product in clinical AI.

Claire Johansson

Read

Northbarn Fund II: Where We Stand After Twelve Months of Deployment

Twelve months into Fund II deployment, we have backed five companies, passed on more than forty, and learned something material about what Series A traction looks like in regulated-industry AI versus what it looked like when we started the fund in 2022. We share that learning here.

Daniel Ostrowski

Read

LLMs in Contract Review: Promise, Limitation, and the Bar-Association Question

Large language models can now review a standard commercial contract faster than a junior associate and flag the same risk categories with comparable recall. What they cannot do is be held professionally accountable for what they miss. That asymmetry is the entire market.

Elliot Vasquez

Read

PCI-DSS 4.0 and the Tokenization Opportunity

PCI-DSS version 4.0 came into effect in March 2022, giving merchants and processors until March 2025 to achieve full compliance. The compliance window is a product window for tokenization infrastructure companies whose architecture maps cleanly to the new standard's scope-reduction requirements.

Elliot Vasquez

Read

What Northbarn Looked for in Fund II: How Our Thesis Evolved from 2019

When we raised Fund II in 2022, our thesis had evolved in three important ways from when we raised Fund I in 2019. The regulatory environment had shifted, the quality of AI tooling had changed, and we had four years of portfolio learning to draw on. We explain what changed and why.

Daniel Ostrowski

Read

The Interoperability Mandate and the Next Chapter for Health IT

The ONC's final rule on information blocking and FHIR-based interoperability APIs created a new floor for health data portability in 2021. Eighteen months later, the effects are becoming visible in how health IT companies architect their platforms and how payers and providers think about vendor relationships.

Claire Johansson

Read

Vertical SaaS Is Not Enough: Why AI Changes the Competitive Dynamics in Regulated Industries

Vertical SaaS companies in healthcare and legal have historically competed on workflow fit and integrations. AI is changing the competitive dynamics in a way that makes the compliance architecture itself the primary differentiator. The companies that understand this first will be very hard to catch.

Daniel Ostrowski

Read

Three Things the Pandemic Accelerated in Healthcare Technology That Are Not Reversing

Two years of clinical technology deployment under emergency conditions produced three structural changes to how health systems evaluate and adopt software. These changes are permanent features of the landscape, and they favor companies that have already crossed the institutional validation threshold.

Claire Johansson

Read

What We Learned Backing Casetext: AI Research in the Law Firm Workflow

Eighteen months after leading Casetext's Series A, we have learned things about AI adoption in law firms that we did not know when we wrote the check. Some of what we expected was right. Some of what the market expected was wrong. The delta is worth examining.

Elliot Vasquez

Read

KYC, AML, and the Real Cost of Manual Compliance in Financial Services

Know-your-customer and anti-money-laundering processes consume an estimated $274 billion in annual compliance cost globally, according to LexisNexis. Automation is overdue. The market is large. The sales cycle into a bank's compliance function is unlike anything in consumer or enterprise SaaS.

Elliot Vasquez

Read

The BAA as a Moat: HIPAA Business Associate Agreements in Healthcare Software Sales

Healthcare software founders often treat the business associate agreement as a paperwork milestone. We treat it as a competitive signal. A company that has negotiated and executed BAAs with three hospital systems has crossed a qualification threshold that most competitors cannot easily replicate.

Daniel Ostrowski

Read

B2B Data Enrichment and the KYC Workflow: What We Saw in the Clearbit Investment

Data enrichment started as a sales intelligence product. The companies using it most intensively by 2020 were not sales teams — they were compliance and onboarding functions at fintechs and financial institutions who needed rapid company and counterparty verification without dedicated data sourcing operations.

Daniel Ostrowski

Read

What the ONC Interoperability Rule Means for the Next Five Years of Health IT Investment

The HHS Office of the National Coordinator's proposed rule on interoperability and information blocking, finalized in March 2020, is the most significant structural change to health data infrastructure in a decade. Its effects on investment theses will take years to fully materialize, but the direction is clear.

Claire Johansson

Read

Why Regulated Industries Are the Right Frontier for AI Investment

When we closed Fund I in March 2019, the thesis — that healthcare, legal, and financial services would reward AI companies with deep domain expertise and compliance-grade architecture — was contrarian. Eight months later, we are more convinced. Here is why.

Daniel Ostrowski

Read

The Compliance-Native Software Company: A New Category Emerges

In healthcare, legal, and financial services, a generation of software companies is emerging that treats compliance not as a feature layer but as a core architectural principle. These companies are not selling into regulated industries despite compliance requirements — they are winning because of them. We call this the compliance-native model.

Daniel Ostrowski

Read

Fund I Investment Thesis: Vertical AI in Regulated Markets

Northbarn Capital closed its first fund in March 2019. This piece explains what we believe, why we believe it, and what we are looking for in the companies we will back. We write it for founders, for LPs, and for our future selves — so we can hold ourselves accountable to the thesis we started with.

Daniel Ostrowski

Read