Pelago Health is a B2B2C digital health company that treats substance use disorder across the United States. To give every employee their own AI co-worker in a healthcare setting built around patients in recovery, the team built Archie: a fleet of 160 agents running entirely inside Pelago's AWS infrastructure, connected to the outside world through Composio as the credential broker, so nothing sensitive crosses the boundary in either direction.
Agents for every employee, inside a regulated boundary
In mid-2025 Pelago set out to give every employee their own AI agent. Pelago treats patients in recovery from substance use disorder, so the data its teams touch is deeply personal, and it operates in a restrictive, highly regulated environment where it cannot simply adopt an off-the-shelf service.
That turned a productivity project into an architecture problem. The agents had to reach hundreds of third-party tools while staying entirely inside Pelago's compliance boundary. No user could ever hand a password to an agent, and no single connecting account could power everything: every action needed role-based access and logging Pelago could attest to. And none of it could depend on a dedicated engineering team just to keep the connections running.
Archie, born inside the firewall
Archie runs on AWS, entirely inside Pelago's internal cloud, with no public API and no external login screen. Every Pelago employee gets a personal Archie agent in Slack on their first day, and department agents run in team channels where the whole team can see the conversation. A shared company brain means every agent knows what was said at last week's All Hands.
Anyone at Pelago, from a clinician to a finance analyst, can describe a workflow problem in plain English in the agent building channel, and Archie's meta-agent writes the configuration, picks the tools and commits the work. New agents go through security review and developer testing before they reach production. A finance team member raised one of those agents over several months into one that now handles invoice reconciliation end to end, which meant Pelago did not need to add a team member for that work.
The credential broker behind every agent
The first, non-negotiable constraint was credentials: no user should type a password into an agent interface, and no access token should ever be visible to Archie. When Archie needs to act in a tool, the user gets a link and authorizes directly with that tool. Composio holds the token, performs the action, and returns only the result, so the credential never crosses into the agent. Sessions persist for the agent's lifespan.
Composio also provides the logging and role-based access controls that Pelago's regulatory environment requires, without a dedicated team behind them. That lets Pelago pursue its growth plans without proportionally growing operational headcount.
