Two former Palantir engineers think they've found a workaround for one of healthcare's more persistent technology problems: how to let non-technical staff build useful internal tools without running afoul of patient privacy laws.
Floracene, a recently formed New York City startup, sells a no-code platform designed specifically for healthcare organizations that lack in-house engineering teams. The product handles authentication, role-based permissions, and HIPAA-compliant data infrastructure, allowing business operators to deploy tools that work with protected health information without waiting months for IT approval.
The founders, Asaph Kupferman and Jonah Kaye, both worked at Palantir before striking out on their own. Kaye spent time on the company's Hospitals team, though no specific encounter with the problem Floracene now aims to solve is documented.
Their pitch centers on a familiar scenario in healthcare IT: An operations manager cobbles together a spreadsheet or dashboard that could genuinely improve workflow. But the tool touches patient data, which means it needs proper authentication and access controls before anyone can use it in production. IT won't budge on the requirements, and the operations manager doesn't have the technical chops to implement them. The tool languishes on someone's laptop.
Floracene positions itself as the middle ground. Operators describe what they need, and the platform generates a production-ready tool with user-scoped read and write permissions already baked in. The company compares itself to Lovable or Retool, but purpose-built for healthcare settings where engineering resources are scarce or nonexistent.
The startup incorporated in New York on June 12, 2026, according to state filings, and participated in a recent Y Combinator batch. Its website remains sparse—just a tagline ("The operating layer for healthcare") and a contact form. No pricing tiers or detailed product documentation are publicly available yet.
Floracene claims one early design partner consolidated existing business intelligence tools into its platform and shipped four new production tools within weeks. The design partner wasn't named, and the company hasn't disclosed how many organizations are currently using the product or whether any are paying customers.
The broader market for HIPAA-compliant no-code tools is already populated, though not crowded. Retool, the most prominent player in the general no-code space, doesn't sign Business Associate Agreements, which effectively disqualifies it for workflows involving protected health information under federal privacy rules. Quickbase offers HIPAA-compliant plans with BAA support, and Knack markets a dedicated health product. Newer startups including Specode and Catepult have also entered the category with similar compliance-first positioning.
Under regulations administered by the U.S. Department of Health and Human Services, any vendor that processes patient data on behalf of a covered entity must sign a BAA and implement technical safeguards: encryption, access controls, audit logging. For smaller healthcare organizations without dedicated compliance staff, that requirement often becomes a deal-breaker for adopting new software.
Floracene anticipates their platform could address the constraint faced by enough healthcare operators to carve out a niche. Whether that market is large enough to support venture-scale returns remains an open question. Y Combinator's standard deal structure since early 2022 has been $500,000 for seven percent equity, though individual terms aren't disclosed.
The company's demo day presentation, assuming it follows the typical YC calendar, would likely have taken place in September. What happened there, and whether Floracene has raised additional capital since, isn't yet public information.
