Pablo 1.0.0
Pablo's first stable release. Pablo is an open-source, self-hostable
AI documentation platform for therapists and psychiatric clinicians:
session notes generated from transcripts with every claim attributable
to its source, running on infrastructure you own.
1.0 means the core is ready for daily clinical use: deploy it on your
own GCP project with setup-solo.sh in under 10 minutes, sign your own
BAAs, and own your data outright — freedom guaranteed by the AGPL
license, not by promise.
Highlights
Clinical documentation
- Note generation with source attribution — SOAP and configurable
note types, dynamic note viewer, standalone notes alongside
session-generated ones. - Patient-context chat — streaming chat grounded in the patient's
chart, with an honest source rail, document picker, chat history,
and save-as-note. Backed by hallucination regression benchmarks in
the evals suite. - Medication lists — add, edit, discontinue with full history;
surfaced in the chart and in chat context. - Patient documents — upload, in-app viewer, OCR fallback for
scanned PDFs, documents visible in the chart and citable in chat.
Compliance & data lifecycle
- Compliance vault — templates for HIPAA and 2026 NPRM controls
(including DEA/board templates for prescribers), severity tagging,
evidence-document uploads, and a supervision cockpit tracking
relationships and accrued hours. - Retention done right — soft-delete with 30-day undo, audio
retention controls, scheduled hard-purge jobs, retention-obligation
attestations at chart closure, and full data export.
Security & audit
- Tamper-evident audit logging: dual-write to Cloud Logging with
retention-locked GCS sinks. - Backend-enforced idle session timeout, mandatory MFA, companion
device enrollment with DPoP proof-of-possession. - Structured JSON logging with a PHI scrubber; a patient-access model
that closes cross-clinician IDOR by construction. - A pentest harness image ships with every release.
Self-hosting
- One-script guided deploy (
setup-solo.sh): GCP project, Cloud SQL,
Identity Platform with MFA, Cloud Run — from pre-built signed images
onghcr.io/pablo-health, no local builds. - Guided transcription-provider selection with an explicit BAA gate
before any PHI leaves your project. - See the Self-Hosting HIPAA Guide.
Upgrading
Images for this release: ghcr.io/pablo-health/backend:v1.0.0 and
ghcr.io/pablo-health/frontend:v1.0.0 (also tagged :latest).
Database migrations run automatically on deploy.
Full changelog: v0.9.3.11...v1.0.0