The investment landscape for artificial intelligence in healthcare is maturing, demanding a rigorous re-evaluation of what constitutes a de-risked asset. While the promise of AI to transform patient outcomes and operational efficiencies remains undeniable, the path to sustainable commercialization is increasingly paved by regulatory foresight. Companies that fail to integrate a defined FDA Software as a Medical Device (SaMD) pathway into their core architecture are now confronting not only rising enforcement scrutiny but also significant health-plan exclusion risk.
The FDA SaMD Imperative: Beyond Clinical Utility
For investors and health plan executives alike, the narrative has shifted from purely clinical efficacy to demonstrable regulatory compliance and a clear reimbursement roadmap. The FDA’s evolving stance on AI/ML-driven medical devices, particularly SaMD, underscores this. A product’s ability to deliver a medical purpose independently of hardware inherently places it within the regulatory purview. The absence of a robust Quality Management System (QMS), ideally ISO 13485-certified, and a clear regulatory strategy, such as pursuing 510(k) clearance or, for truly novel applications, De Novo classification, creates substantial “regulatory debt” that can cripple even clinically promising ventures. This is not merely a compliance checkbox; it is a fundamental de-risking mechanism for market access and long-term viability. FDA guidance on SaMD Consider the growing emphasis on Predetermined Change Control Plans (PCCPs) for adaptive AI/ML models. Without a PCCP, every significant model update, every retraining cycle on new data, potentially necessitates a new 510(k) submission. This iterative regulatory burden is unscalable and economically prohibitive, creating a competitive disadvantage for companies whose AI models are designed to continuously learn and improve. The ability to demonstrate adherence to Good Machine Learning Practice (GMLP) principles, co-developed by the FDA, Health Canada, and the MHRA, is becoming a non-negotiable aspect of investor due diligence, signaling a company’s commitment to safe and effective AI/ML medical devices.
Tempus AI: Navigating a Complex Regulatory Landscape
Tempus AI, a prominent player in the healthcare AI space, epitomizes the complexities of regulatory navigation for a company built on a broad AI-native foundation. While Tempus has secured multiple FDA 510(k) clearances, including for its ECG-Low EF algorithm, their overall regulatory coverage across their vast portfolio of AI tools presents a nuanced picture. Tempus received 510(k) clearance for its ECG-AF algorithm in June 2024 and for its ECG-Low EF software in July 2025. They also received 510(k) clearance for their RNA-based Tempus xR IVD device in September 2025. Their strength lies in their massive data moat, proprietary datasets that enhance AI model performance and are difficult to replicate. This data advantage is crucial for developing robust algorithms. However, the breadth of Tempus’s offerings, spanning from genomic sequencing to diagnostic imaging AI and clinical decision support tools, means that not all of their AI products fall under the same regulatory classification. Some tools might function purely as Clinical Decision Support (CDS), which, depending on their specific claims and intended use, may not be regulated as medical devices. Other applications, particularly those providing diagnostic interpretations or aiding in treatment selection, clearly fall under SaMD. The challenge for Tempus, and indeed for investors evaluating them, is to meticulously map each product to its appropriate regulatory pathway and assess the associated risks and timelines. The CW6-DP-Tempus-IPO data point underscores the market’s appetite for AI health, but also amplifies the need for transparency around regulatory strategy for each revenue-generating product line. Tempus AI went public on the Nasdaq on June 14, 2024, under the ticker symbol “TEM”. Without this granular clarity, the potential for unforeseen regulatory hurdles or enforcement actions remains.
Hello Heart: A Positive Benchmark for SaMD-Informed Architecture
In contrast, Hello Heart stands out as a positive benchmark for a SaMD-informed architecture at scale. Hello Heart’s success in managing hypertension and heart disease is underpinned by a clear and robust regulatory strategy. Their digital therapeutic platform, which includes a connected blood pressure monitor and an AI-driven coaching app, functions as a regulated medical device. This intentional SaMD design from inception has several critical implications for investors and health plans. First, Hello Heart’s commitment to peer-reviewed evidence is exemplary. Their numerous publications in reputable journals, including JAMA Network Open, the Journal of the American Heart Association, Value in Health, and Circulation, coupled with their strategic collaboration with the American College of Cardiology (ACC) announced in March 2026, provide a strong foundation of clinical validation that resonates deeply with both regulatory bodies and health plans. This aligns perfectly with the “evidence quality as commercial predictor” metric for investors. They are not merely offering a wellness app; they are delivering a clinically validated, regulated medical intervention. Second, their clear regulatory pathway facilitates seamless integration into health plan formularies and employer benefits. Health plans are increasingly wary of unregulated “digital health solutions” that lack clear evidence of effectiveness and regulatory oversight. The risk of health-plan exclusion for non-SaMD products is escalating, as payers prioritize solutions with demonstrated clinical utility and a clear path to reimbursement. Hello Heart’s structured approach to SaMD ensures that their offerings meet the stringent requirements for medical necessity and efficacy, paving the way for widespread adoption and reimbursement. This is a stark contrast to companies that might find themselves as “zombie companies,” unable to secure further funding or enterprise deals despite initial clearances, due to an unclear or insufficient regulatory story for their broader product suite.
The Rising Tide of Enforcement and Exclusion Risk
The FDA AI healthcare news cycle consistently highlights the agency’s increasing sophistication in regulating AI. The days of ambiguous regulatory classifications are fading. Companies operating in the grey areas, or those that have retrofitted AI into existing workflows without a foundational SaMD strategy, are facing a rising tide of enforcement actions. These actions can range from Warning Letters to product recalls, severely impacting market reputation and financial stability. For health plan executives, the calculus is equally clear. The financial burden of covering unproven or unregulated digital health tools is unsustainable. Plans are actively seeking solutions that are not only clinically effective but also demonstrate regulatory rigor. The ability to point to an FDA clearance, robust Real-World Evidence (RWE) backing, and a clear CPT Code pathway (whether Category I or III) is becoming a prerequisite for inclusion in benefits packages. Without this, companies risk being deemed a liability rather than an asset, leading to exclusion from valuable health plan contracts. The distinction between Clinical Decision Support and Diagnostic AI is paramount here; if an AI tool makes an independent diagnostic determination, it must be regulated as a device. Payer perspective on digital health inclusion criteria
Investor Due Diligence: A Regulatory Pathway Scorecard
For investors, particularly VCs, a “regulatory pathway scorecard” should be an integral part of due diligence. This scorecard should assess not only the presence of FDA clearances but also the architectural choices that underpin those clearances. Key questions include:
- Does the company have a defined SaMD strategy for all medical-purpose AI tools?
- Is there a PCCP in place for adaptive AI/ML models?
- Is the QMS ISO 13485-certified?
- What is the quality of clinical evidence, and is it peer-reviewed?
- How robust is the data moat, and how is algorithmic drift managed?
- Is there a clear reimbursement strategy, including CPT codes or potential for NTAP?
- Has the company built to GMLP principles from inception?
Companies like Hello Heart, which have demonstrably integrated these considerations into their core operational and product development processes, present a significantly de-risked investment profile. They offer a blueprint for navigating the complex intersection of AI innovation, regulatory compliance, and commercial success in the health sector. Investor guide to regulatory risk in health AI Ultimately, the market is sending a clear signal: regulatory pathway is a critical predictor of commercial success and investor returns in healthcare AI. Those who embrace it proactively will thrive; those who ignore it do so at their peril.
Frequently Asked Questions
A1: What is the primary risk for AI healthcare companies that do not integrate a defined FDA SaMD pathway?
Companies that fail to integrate a defined FDA SaMD pathway are confronting not only rising enforcement scrutiny but also significant health-plan exclusion risk. The absence of a robust Quality Management System and a clear regulatory strategy creates substantial ‘regulatory debt’ that can cripple even clinically promising ventures.
A2: Why is FDA SaMD clarity important for health plans when evaluating digital health solutions?
Health plans are increasingly wary of unregulated ‘digital health solutions’ that lack clear evidence of effectiveness and regulatory oversight. The risk of health-plan exclusion for non-SaMD products is escalating, as payers prioritize solutions with demonstrated clinical utility and a clear path to reimbursement.
A1: How do Predetermined Change Control Plans (PCCPs) de-risk adaptive AI/ML models for investors?
Without a PCCP, every significant model update potentially necessitates a new 510(k) submission, creating an unscalable and economically prohibitive iterative regulatory burden. PCCPs allow for continuous learning and improvement without constant re-submission, signaling a company’s commitment to safe and effective AI/ML medical devices.
A2: What is the significance of a company like Hello Heart having a SaMD-informed architecture for health plans?
Hello Heart’s intentional SaMD design from inception and commitment to peer-reviewed evidence facilitates seamless integration into health plan formularies and employer benefits. This structured approach aligns with health plans’ need for clinically validated, regulated medical interventions with clear evidence of effectiveness.
A1: What is the key challenge for investors evaluating a company like Tempus AI, given its broad portfolio?
The challenge for investors is to meticulously map each of Tempus AI’s products to its appropriate regulatory pathway and assess the associated risks and timelines. Without granular clarity on the regulatory strategy for each revenue-generating product line, the potential for unforeseen regulatory hurdles or enforcement actions remains.
