Validating healthcare AI
A Buyer's Checklist for Deciding Whether Healthcare AI Deserves Your Trust
Before you let an AI tool touch patient care, you can decide whether it deserves your trust by answering six questions: what it is meant to do, what evidence stands behind its headline claim, who it was tested on, whether you can see how it reasons, how it will be watched after go-live, and who is on the hook when it is wrong.
Before you let an AI tool touch patient care, you can decide whether it deserves your trust by answering six questions: what it is meant to do, what evidence stands behind its headline claim, who it was tested on, whether you can see how it reasons, how it will be watched after go-live, and who is on the hook when it is wrong. If a vendor cannot give clean answers to all six, the right move is to wait, not to sign. The same checklist works for a chatbot, a triage engine, or a clinical decision-support system.
The field is hard and the teams are usually acting in good faith, so this is not a way to catch anyone out. It is a way to protect patients and to give a strong tool the scrutiny that lets you defend it later. Trustworthy clinical AI, to define the term, is a system whose intended use is stated plainly, whose benefit has been shown in the patients you actually treat, and whose behavior you can monitor and hold someone accountable for once it is live. Accuracy is part of that, not all of it.
What is this AI tool actually for?
Start with intended use, because almost every later confusion traces back to skipping it. Ask the vendor to state, in one sentence, the clinical question the tool answers and the population it answers it for. A tool that "supports diabetes care" is not a claim you can evaluate. A tool that "flags adults with type 2 diabetes likely to miss their next HbA1c target, so a clinician can act earlier" is.
Intended use defines the test. A common trap is buying a tool validated for one purpose and quietly deploying it for an adjacent one: a model that triages chest pain in an emergency department is not automatically safe for telephone triage from home, though both sound like "triage." A narrow purpose can be checked against the evidence; a vague one usually hides the gap.
What evidence stands behind the headline claim?
Once you know what the tool claims to do, match the strength of the evidence to the size of the decision. The weakest evidence is internal benchmark performance: the model scored well on a held-out slice of its own training data, which shows it can pattern-match on familiar data but not that it changes care. Stronger is external validation on data from a setting the model never saw. Strongest is a prospective study where the tool was used in real care and outcomes were measured against a comparison group.
Ask to see where the tool was compared against what clinicians do today, and what changed. In the EASY-1 randomized controlled trial (NCT03258268) we evaluated a diabetes decision-support system I helped develop against standard of care across multiple clinics. A registered trial with a real comparator, prespecified endpoints, and several sites lets you test whether the tool helped, not merely that it shipped. Not every vendor needs a randomized trial, but the evidence should match the trust you extend.
Where, and on whom, was it validated?
This is the question most often skipped, and the one that quietly breaks tools in the field. A model can perform beautifully on the population it learned from and degrade on yours for reasons that have nothing to do with the code, because the patients differ in age, in comorbidity, in how their data was recorded. My own research on ethnic differences in the relationship between insulin sensitivity and insulin response is a reminder that a pattern holding in one group does not always transfer to another. A tool validated on people unlike yours hands you a headline number that is not yours to inherit.
So ask who was in the validation set, how closely they resemble your patients, and whether the tool was tested outside the institution that built it. A tool proven only inside its developer's own walls may be leaning on local habits and data formats rather than on anything portable.
Can you see how it reaches its conclusion?
Transparency does not require the vendor to hand over their model weights. It requires that, for a given patient, a clinician can understand enough about why the tool said what it said to decide whether to believe it. A recommendation a physician cannot interrogate tends to get over-trusted on a bad day and ignored on a good one.
The useful standard is not full mathematical explainability, which is often impossible, but clinical inspectability: the tool surfaces the factors driving its output in terms a clinician recognizes, and makes its uncertainty visible rather than dressing every answer in the same flat confidence. Ask to see what the clinician sees at the moment of decision.
How will the tool be watched after it goes live?
Approval and purchase are the start of a tool's life, not the end of its evaluation. Models drift: patients change, a lab switches assays, an upstream system gets reconfigured, and a tool accurate at go-live slowly stops being accurate without anyone noticing. Ask what the monitoring plan is before you sign.
A serious answer names what will be measured, how often, who reviews it, and what threshold triggers a pause, much the way a good pharmacy keeps watching a drug already on the market. If the plan ends at the sale, you are buying a snapshot and hoping it lasts.
Who is accountable when it is wrong?
Every tool will eventually be wrong about someone. The question is not whether, but who answers for it, and that should be written down before deployment. Accountability has two halves buyers often blur together. The clinical half keeps the responsible clinician as decision-maker, with the tool supporting rather than replacing that judgment. The vendor half sets clear lines for reporting a suspected error and where the developer's responsibility ends. A tool that positions itself as autonomous while leaving liability with the clinician is a mismatch you want to find now, on paper, rather than later in a case review. Regulators are moving the same way, treating AI as software that needs clinical evidence and a named responsible party rather than working code alone.
Run these six questions in order and they build on each other, since each answer sets up the next. A tool that clears all of them is one you can defend to a patient. This article is educational and reflects my own view as a researcher; it is not medical advice, and patients should always talk to their own clinician about their care.
References and sources
How this was researched. This explainer is built from the primary sources listed above and reflects Dr. Tojjar's own critical appraisal of that evidence. It explains and evaluates research and does not provide medical care.
This article is for general education and is not medical or professional advice. For guidance about your own health, talk with a qualified clinician.
Cite this article
Tojjar, D. (2025). A Buyer's Checklist for Deciding Whether Healthcare AI Deserves Your Trust. Dr. Damon Tojjar. https://readingtheevidence.org/articles/evaluating-healthcare-ai-before-you-trust-it/
This article is part of Dr. Tojjar's guide to Validating healthcare AI.
Part of the reading path How to judge a clinical AI tool (step 1 of 7).
Part of the reading path How Clinical AI Earns Trust (step 10 of 10).