HeartFlow

aid: heartflow
name: HeartFlow
description: 'Heartflow, Inc. (Nasdaq: HTFL) is a healthcare technology company founded in 2010 and headquartered in San Francisco,
  California. Its Heartflow One platform applies AI to coronary computed tomography angiography (CCTA) to non-invasively diagnose
  and manage coronary artery disease, bundling Roadmap Analysis, FFRct Analysis, Plaque Analysis, Plaque Staging and the PCI
  Navigator, and delivering results back into hospital PACS and EMR systems. More than 650,000 patients have been analyzed
  across 1,800+ institutions. Heartflow runs a production REST API at api.heartflow.net and customer documentation at docs.heartflow.net,
  but both are authenticated: there is no public developer program, no published OpenAPI, and no self-serve signup.'
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: false
  label: Hosted service · you call their endpoint
  confidence: medium
  source:
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: unknown
  onboarding: open
  trial: false
  try_now: false
  public: true
  label: Open access
  confidence: medium
  source:
  - authentication
  - rate-limits
  - security
  generated: '2026-09-02'
  method: derived
image: https://www.heartflow.com/wp-content/uploads/2025/01/heartflow_logo_white.svg
url: https://raw.githubusercontent.com/api-evangelist/heartflow/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.20'
created: '2026-08-22'
modified: '2026-08-22'
tags:
- Company
- Healthcare
- Medical Imaging
- Artificial Intelligence
- Cardiology
- Diagnostics
- Medical Devices
- Radiology
- Clinical Decision Support
- Machine Learning
tags_raw:
- Company
- Healthcare
- Medical Imaging
- Artificial Intelligence
- Cardiology
- Diagnostics
- Medical Devices
- Radiology
- Clinical Decision Support
- Machine Learning
- Machine-Learning
apis:
- name: Heartflow One Platform API
  description: Production REST API behind the Heartflow One platform, observed live at https://api.heartflow.net. Every probed
    route answers with the Django REST Framework challenge {"detail":"Authentication credentials were not provided."}, and
    the interactive reference surfaces the framework normally exposes (/swagger/, /redoc/) return 403 rather than a public
    document. No OpenAPI or Swagger definition is retrievable without credentials, so this entry records the surface, not
    its contract.
  humanURL: https://www.heartflow.com/heartflow-one/support/
  baseURL: https://api.heartflow.net
  tags:
  - Healthcare
  - Medical Imaging
  - Cardiology
  properties: []
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: TrustCenter
  url: security/heartflow-trust-center.yml
- type: DomainSecurity
  url: security/heartflow-domain-security.yml
- type: Website
  url: https://www.heartflow.com/
- type: Support
  url: https://www.heartflow.com/heartflow-one/support/
- type: Blog
  url: https://www.heartflow.com/insights/
- type: GitHubOrganization
  url: https://github.com/HeartFlow
- type: Login
  url: https://app.heartflow.net/
- type: TermsOfService
  url: https://www.heartflow.com/terms-of-use/
- type: PrivacyPolicy
  url: https://www.heartflow.com/privacy-policy/
- type: Compliance
  url: conformance/heartflow-conformance.yml
- type: Conformance
  url: conformance/heartflow-conformance.yml
- type: Plans
  url: plans/heartflow-plans-pricing.yml
- type: RateLimits
  url: rate-limits/heartflow-rate-limits.yml
- type: Packages
  url: packages/heartflow-packages.yml
- type: LLMsTxt
  url: llms/heartflow-llms.txt
- type: Lifecycle
  url: lifecycle/heartflow-lifecycle.yml
x-enrichment:
  date: '2026-08-22'
  status: minimal
  artifacts_added: 11
  pass: local-v1
x-coverage:
  state: gated
  reason: customer-only-docs
  detail: Heartflow runs a live Django REST Framework API at api.heartflow.net whose every route, including the mounted /swagger/
    and /redoc/ reference pages, answers 403 "Authentication credentials were not provided.", and its documentation host docs.heartflow.net
    is a CloudFront distribution gated by signed cookies that returns 403 MissingKey on every path, so the contract exists
    but is issued only to contracted institutional customers.
  evidence:
  - url: https://api.heartflow.net/api/v1/
    status: 403
  - url: https://api.heartflow.net/swagger/
    status: 403
  - url: https://docs.heartflow.net/openapi.json
    status: 403
  - url: https://api.heartflow.net/openapi.json
    status: 404
  - url: https://www.heartflow.com/llms.txt
    status: 404
  checked: '2026-08-22'