Tempus AI AI Vendor Risk Profile
Precision-medicine technology company applying AI to one of the world's largest libraries of clinical and molecular data. Provides genomic sequencing, clinical-trial matching (Deep 6 AI), and an AI-driven clinical decision platform. NASDAQ:TEM (IPO June 2024 at $37). FY2024 revenue ~$693M, 30%+ YoY growth.
Risk overview
Risk score: 41/100
Risk tier: Elevated
Safety rating: 59/100 (higher is better)
Lower risk scores indicate lower assessed risk.
Last verified: May 15, 2026 Fresh
Risk dimensions
| Dimension | Risk score |
|---|---|
| Data Handling | 60/100 |
| IP Exposure | 34/100 |
| Jurisdiction | 13/100 |
| Security | 34/100 |
| Regulatory Compliance | 50/100 |
| Transparency | 65/100 |
| Business Stability | 27/100 |
| Dependency Chain | 41/100 |
| Agent Governance | Not assessed |
Analyst summary
Rating: Recommended
Tempus is the largest pure-play AI healthcare data company on US public markets — NASDAQ:TEM since June 2024, FY2024 revenue $693M, $600M Ambry Genetics acquisition closed February 2025, Deep 6 AI clinical-trial recruitment platform added in March 2025. The compliance posture is appropriate for the protected health information it processes: SOC 2 Type II, ISO 27001, HIPAA, and GDPR with BAA available. The EU AI Act "high risk" classification is honest about the regulatory burden of clinical decision support.
Bottom line: The best-credentialed public-market AI healthcare vendor today. Compliance posture matches the regulated context, financial disclosure is investor-grade, and the genomic-data and clinical-trial footprint is genuinely deep. Buyers should expect heavy contractual negotiation on data-use scope and EU AI Act allocation of compliance responsibilities.
Strengths
- Publicly listed (NASDAQ:TEM) with audited financials — disclosure transparency uncommon among AI vendors
- SOC 2 Type II, ISO 27001, HIPAA, GDPR compliance posture
- HIPAA BAA available — appropriate for processing PHI
- One of the largest clinical and molecular data corpora in the industry
- FDA-regulated clinical-trial work and academic-medical-center partnerships provide deep domain depth
- Ambry Genetics and Deep 6 AI acquisitions broaden the genomic-testing and trial-matching footprint
Concerns
- EU AI Act classifies clinical decision support as high-risk — buyers carry the regulatory implementation burden
- Public subprocessor list not disclosed
- Output-IP boundary between Tempus, clinical partners, and pharma data customers is complex and contract-specific
- ISO 42001 (AI management system) not yet pursued
- Active lobbying disclosed; review for any conflicts on policy-sensitive deployments
- US CLOUD Act exposure on US-resident PHI
Best for
- Health systems, academic medical centers, and biopharma needing precision-medicine analytics with a US-listed counterparty
- Buyers who require a HIPAA BAA and SOC 2 Type II from an AI vendor processing PHI
- Clinical-trial recruitment workflows (Deep 6 AI integration)
Avoid if
- Your data classification policy prohibits US cloud processing of patient data even with BAA in place
- You require FedRAMP authorization for clinical workloads
- Your procurement requires ISO 42001 or full EU AI Act high-risk compliance evidence before contract
Citations
- Governance — Government Contracts
- Ip Profile — Training Data Provenance
- Security Compliance — Hipaa Compliant
- Vendors — Last Valuation Usd
- Vendors — Funding Stage
- Vendors — Public Ticker