hims & hers × Cloudflare
Build the first pilot →
AI care infrastructure brief

Make AI the operating system for care.

Cloudflare already sits in front of hims.com. Extend that same network into a governed agent platform for Labs AI, provider copilots, smarter intake, care companions, and the operations behind personalized care.

2.584Msubscribers at Q1 2026
10-Q
50M+telehealth consultations facilitated
2025 10-K
130biomarker tests reasoned across by Labs AI
May 2026
70%+of 2025 US revenue from personalized offerings
2025 10-K

Your strategy is already clear.

Hims & Hers has described AI embedded across intake, triage, clinical documentation, follow-up, and adherence, with clinicians retaining judgment and accountability. Labs AI is the first visible care agent; MedMatch already assists providers with personalized care decisions.

Sources: AI as the Operating System for Care, Apr. 2026; Labs AI, May 2026; MedMatch and care routing, Nov. 2024.

Documented products and stated roadmap → one governed control plane
DISCOVERSmarter intake
UNDERSTANDLabs AI
DECIDEMedMatch
DELIVERProvider copilot
CONTINUECare companion
OPERATEPharmacy + labs
Cloudflare Agent Platform

Models + retrieval + durable state + workflows + tools + security + observability

Six plays to scale trusted care.

Build on the edge relationship already in place. Each play maps to a Hims product or roadmap item documented publicly; Cloudflare is the proposed enabling layer, not a replacement for clinical systems or clinician judgment.

GAI Gateway + AI Security

One governed front door for every model

Standardize how Labs AI, MedMatch, and future agents reach Workers AI or third-party models.

  • Provider routing, fallback, rate limits, and cost visibility
  • DLP and prompt-injection detections as defense-in-depth
  • Metadata-only logging and no patient-specific caching for PHI paths
AAgents SDK + Durable Objects

Stateful care agents that preserve continuity

Give each member or care journey durable state, resumable conversations, scheduled follow-up, and explicit handoff.

  • Persistent sessions across app, web, and reconnects
  • Human approval before clinical actions or EMR writeback
  • Patient-isolated state with retention and deletion controls
RAI Search + Vectorize

Retrieval grounded in Hims clinical knowledge

Extend the curated-knowledge pattern behind Labs AI into provider, support, medication, and operations copilots.

  • Hybrid retrieval with source citations and metadata filters
  • Policy versioning, expiration, authorization, and abstention
  • Curated evidence instead of open-web answers
WWorkflows + Queues

Durable orchestration beyond the chat window

Coordinate intake, routing, documentation, lab follow-up, refill exceptions, and pharmacy operations through recoverable steps.

  • Retries, waits, approvals, and complete step history
  • Deterministic escalation for urgent and high-risk cases
  • Backpressure and dead-letter handling for operational work
MEmail + Voice + MCP + Browser Run

Meet members and teams where care happens

Make agents available through chat, voice, email, push, and approved operational tools without opening broad data paths.

  • Minimal-PHI notifications with consent and preference controls
  • Scoped MCP tools and short-lived user-delegated identity
  • Human-assisted browser automation only where APIs do not exist
OAgent Tracing + Flagship + Sandbox

Ship agents like regulated software

Observe every model and tool step, test against clinician-created benchmarks, and roll out safely by cohort.

  • Agent session tracing with PHI-redacted telemetry
  • Shadow releases, feature flags, instant rollback, and kill switches
  • Isolated code execution for evaluation and engineering agents

New from Agents Week

Current through Aug. 4, 2026
Cloudflare AgentsUnified agent sessions and tracing. Beta.
Python ↔ JavaScript RPCConnect ML services and application agents. Available.
@cloudflare/computerAgent runtime across isolates and containers. Early preview.
Billable Usage APIProgrammatic AI and platform FinOps. Live.

The clinical line stays bright.

Cloudflare security controls can help govern AI traffic, tools, and data, but they do not validate medical accuracy. Diagnosis, prescribing, dose changes, abnormal-lab interpretation, urgent triage disposition, and EMR writeback should remain behind validated deterministic rules and mandatory clinician approval.

A pragmatic path from control to care.

Start with governance and a lower-risk copilot. Prove safety, quality, latency, and unit economics before extending the same platform into patient-facing experiences.

Days 0-30

Establish the control plane

  • Confirm BAA and service-by-service PHI scope
  • Route one non-PHI model path through AI Gateway
  • Define metadata-only logs, retention, access, and deletion
  • Import clinician-created evaluation and regression sets
Days 31-90

Pilot a grounded copilot

  • Start with support assist or provider documentation drafts
  • Ground answers in an approved AI Search corpus
  • Add citations, abstention, and mandatory human review
  • Measure quality, handling time, latency, and cost
Days 91-180

Extend across the care journey

  • Apply durable state and workflows to continuity use cases
  • Add app, email, push, or voice channels deliberately
  • Roll out by cohort with Flagship and instant rollback
  • Reuse governance across Labs AI, MedMatch, and companions

Executive snapshot.

The current-state column contains only public Hims statements or directly observed technical signals. The final column is the proposed Cloudflare expansion.

FunctionHims todayPublic evidenceNext on Cloudflare
EdgeCloudflare already fronts hims.comserver: cloudflare, cf-ray, www CNAMEExtend from delivery into the AI control plane
Patient agentLabs AI in phased rolloutHims newsroom, May 2026Agents SDK + AI Gateway + durable state
Provider intelligenceMedMatch supports provider recommendationsHims newsroom, Nov. 2024Governed inference + tracing + staged rollout
Clinical knowledgeLabs AI uses a curated medical knowledge baseHims newsroom, May 2026AI Search + Vectorize with citations and controls
Care workflowAI roadmap spans intake through adherenceHims newsroom, Apr. 2026Workflows + Queues + human approval
Scale2.584M subscribers across multiple marketsQ1 2026 10-QGlobally distributed Workers + per-member state

Scroll the table sideways to see the public evidence and proposed next step.

How we know.

Public product statements establish the AI direction. Live headers, CSP, DNS, and page configuration establish the current technical signals. Proposed Cloudflare architecture is kept separate from both.

Cloudflare server + cf-ray Labs AI May 2026 launch MedMatch provider AI/ML AI roadmap Apr. 2026 Cloudinary CSP + assets AWS CloudFront CSP Auth0 CSP Datadog page config Zendesk support CNAME
LIVE Checking the Cloudflare edge serving this brief...