Full observability with self-hosted internal tracing
By Jeff DeKelver | September 2026When a healthcare AI gives clinical guidance, someone needs to be able to answer the question: “Why did it say that?” Regulatory frameworks like HIPAA and emerging AI governance standards increasingly require organizations to demonstrate that their AI systems are auditable, traceable, and transparent. Yet most enterprise AI deployments operate as black boxes. A prompt goes in, a response comes out, and there’s no record of what happened in between — which models were used, what security scanners fired, what documents were retrieved, or how long each step took. This lack of observability isn’t just a compliance gap; it’s a patient safety risk.
Fortaleza AI integrates Langfuse v3, the leading open-source LLM observability platform, running entirely self-hosted within your Docker stack. Every request generates a multi-level trace that records the complete lifecycle: security scan verdicts, agent routing decisions made by the orchestrator, RAG document retrieval with source attribution, LLM inference parameters and response tokens, and total end-to-end latency. These traces are stored in the system for high-speed analytical queries and accessible through Langfuse’s web dashboard, which runs alongside your AI platform behind your firewall.
Implementing production-quality tracing required solving several non-obvious architectural challenges. Langfuse’s SDK v3 fundamentally changed how trace attribution works: you initialize a global client at startup and it follows throughout the full stack, recording everything as it goes. We built a per-request client pattern that creates fresh handlers for every API call, properly records them after each response, and correctly tags traces to the right user session.
The observability system also powers our security monitoring workflow. Every LLM Guard and NeMo scan result is recorded as a Langfuse event with the full scanner scores, verdict tier (PASS/WARN/BLOCK), and triggered scanner names. Security teams can identify patterns: which scanners fire most frequently, which users trigger the most warnings, and whether specific document types cause false positives. When a WARN verdict is issued, the trace includes the borderline scanner scores so administrators can fine-tune thresholds based on real production data rather than guesswork.
In healthcare, observability isn’t optional — it’s the foundation of responsible AI deployment. When a clinician asks the AI about a drug interaction and the AI provides an answer grounded in your approved formulary, the observability trace proves it. When an auditor wants to know whether patient data was exposed in any AI interaction over the past quarter, you can query the security event logs in seconds. And when your team needs to optimize response times, the per-step latency data shows exactly where bottlenecks occur. Fortaleza AI doesn’t just give you AI — it gives you provable AI.