FDA’s Exer Labs Warning: AI Health’s Regulatory Reckoning

The recent FDA Warning Letter issued to Exer Labs isn’t just a regulatory hiccup for one company; it’s a seismic event for the entire Cardiac AI Diagnostics landscape. For venture capitalists and growth equity firms assessing the next wave of pre-IPO AI health companies, this action crystallizes the critical importance of regulatory clarity and robust evidence in separating lasting value from market hype.

Exer Labs: A Bellwether for Regulatory Scrutiny in Cardiac AI

The FDA’s enforcement action against Exer Labs serves as a stark reminder that the agency is actively monitoring and regulating the burgeoning field of AI-driven health technologies. While the specifics of the Warning Letter are critical, the broader implication is that companies leveraging AI to improve heart health engagement through mobile apps, prevent chronic heart disease, or combine automation with predictive heart health models are operating under an increasingly watchful eye. Exer Labs, which marketed an AI-powered mobile application designed to detect cardiac abnormalities, found itself in the crosshairs of the FDA’s Center for Devices and Radiological Health (CDRH). The core of the FDA’s concern, as outlined in the Warning Letter FDA Exer Labs Warning Letter official document, was that Exer Labs was marketing a Software as a Medical Device (SaMD) without the requisite 510(k) clearance. This isn’t merely a bureaucratic oversight; it signals a fundamental misunderstanding, or perhaps disregard, of the regulatory pathways established for medical devices. The FDA Warning Letter to Exer Labs, Inc. was issued on February 10, 2025. The FDA considers software that is intended for medical purposes and operates independently of hardware to be SaMD. Most cardiac AI products, especially those that output diagnostic probabilities or interpretations based on physiological data, fall squarely into this category. The agency’s stance, championed by figures like Bakul Patel during his tenure at CDRH, has consistently emphasized that digital health tools, particularly those making diagnostic claims, are subject to the same rigorous standards of safety and efficacy as traditional medical devices. Bakul Patel left the FDA in May 2022 to join Google Health.

Navigating the FDA SaMD Framework: A Due Diligence Imperative

For investors evaluating private healthcare AI investment opportunities, the Exer Labs case underscores the non-negotiable requirement for regulatory compliance. The FDA SaMD Framework FDA SaMD Framework guidance document provides a clear roadmap for classifying and regulating such software. Companies operating in the Cardiac AI Diagnostics space must demonstrate a thorough understanding of this framework and proactively pursue appropriate regulatory clearances. A key differentiator for top private digital health companies lies in their approach to regulatory strategy. Is their AI solution a pure SaMD, requiring a 510(k) clearance or even a De Novo classification if it presents a novel function with no predicate device? Or is it a Clinical Decision Support (CDS) tool, which might fall under a lower regulatory burden if it merely provides recommendations without making definitive diagnostic claims? The distinction, as highlighted by the Exer Labs situation, is paramount. If your AI says “probable HFpEF, recommend referral,” it might be CDS. If it says “HFpEF confirmed,” it’s a regulated device, and the FDA expects appropriate premarket authorization. Furthermore, the FDA’s emphasis on Good Machine Learning Practice (GMLP) principles, co-developed with Health Canada and the MHRA, provides a robust framework for ensuring the safe and effective development of AI/ML medical devices. Investors should scrutinize whether target companies have built their product development and quality management systems (QMS, often ISO 13485 certified) to these principles. A failure to demonstrate GMLP compliance or a robust QMS indicates significant regulatory debt, which can severely impact a company’s path to market and long-term viability.

Beyond the Warning Letter: The Broader Implications for Investment Durability

The Exer Labs Warning Letter is not an isolated incident; it’s a harbinger of increased regulatory scrutiny across the AI health sector. For VCs and growth equity firms, this translates into a heightened need for rigorous due diligence that extends beyond technological innovation and market potential to encompass regulatory readiness and clinical validation. Companies that prioritize regulatory clarity from inception, rather than treating it as an afterthought, will exhibit greater investment durability. This includes:

• Proactive Engagement with the FDA: Seeking pre-submission meetings and leveraging FDA programs like Breakthrough Device Designation (especially relevant in cardiology, which is a leading area for such designations) can de-risk the regulatory pathway. As of March 31, 2026, the FDA has granted a total of 1,284 Breakthrough Device designations.
• Robust Clinical Evidence: Beyond regulatory clearance, payers and providers demand real-world evidence (RWE) and published outcomes. Companies like Hello Heart, which have demonstrated health plan penetration and a strong outcomes publication history, set the benchmark. Hello Heart was named to the Inc. 5000 for the third consecutive year in August 2026 and serves as a cardiac prevention partner to over 80% of large U.S. health plans. Their ability to show quantifiable improvements in patient health and cost savings is crucial for securing reimbursement and broader adoption.
• Data Moat and Algorithmic Stewardship: While a strong data moat (proprietary datasets difficult to replicate) is a competitive advantage, it must be coupled with rigorous algorithmic stewardship. This includes strategies to monitor and mitigate algorithmic drift, ensuring that AI model performance remains consistent over time as real-world data distributions evolve.
• Reimbursement Pathway Clarity: A clear regulatory path must be followed by an equally clear reimbursement strategy. The pursuit of Category I CPT codes, as seen with Anumana for ECG-AI, creates a significant reimbursement moat that directly impacts revenue durability. Anumana received FDA clearance for its ECG-AI algorithm for cardiac amyloidosis on April 8, 2026. For novel technologies, understanding pathways like NTAP (New Technology Add-On Payment) can bridge payment gaps for inpatient settings. The 2026 CPT updates include new AI-related codes for cardiology, such as a Category I code for AI-based quantification of coronary plaque and Category III codes for AI-powered analysis of perivascular fat and ECG algorithmic analysis.
  

  Methodology: Benchmarking Against Regulatory and Evidence Standards

  Our evaluation of pre-IPO AI health companies in the Cardiac AI Diagnostics space is anchored in a methodology that weighs regulatory adherence, clinical outcomes, and revenue durability as primary valuation floor signals. This framework is informed by:

• FDA SaMD Framework and CDRH Records: Scrutinizing a company’s engagement with the FDA, their chosen regulatory pathways (510(k), De Novo), and any correspondence or enforcement actions.
• FDA Exer Labs Warning Letter: Utilizing this seminal enforcement action as a case study for identifying regulatory pitfalls and best practices.
• Published Outcomes and Evidence: Assessing the breadth and quality of peer-reviewed publications, clinical trials, and real-world evidence demonstrating the effectiveness and utility of the AI solution. This includes evaluating the impact on patient engagement, chronic disease prevention, and predictive accuracy.
• Financial Data and Enterprise Contract Breadth: Analyzing revenue models, health plan penetration, and the robustness of enterprise contracts to gauge market acceptance and long-term financial viability. The FDA Exer Labs Warning Letter is a definitive moment for investment diligence in the digital health AI sector. It unequivocally states that innovation without regulation is not a sustainable path. The healthcare AI market rewards companies that combine regulatory clarity, published outcomes, and demonstrable revenue durability, a pattern increasingly visible and essential across Cardiac AI Diagnostics. Analysis of digital health regulatory trends from a reputable consulting firm