Use de-identified evaluation records
The current product is intended for professional workflow evaluation using de-identified data. Do not enter names, direct patient identifiers, protected clinical records or emergency requests. It is not an electronic health record or a validated medical device.
Contact us before proposing a clinical deployment or restricted data. The delivered software does not claim HIPAA compliance, SOC 2 certification or independent clinical validation.
Guest records stay in this browser
Editing, saving and exporting guest cases do not send their contents to the server. Guest records use local browser storage, which is not encrypted by this application. Shared devices and browser extensions can expose local data. Keep your own exports; clearing browser storage removes guest cases.
Invited cases use private encrypted storage
Invited cases and temporary AI retry results are encrypted with AES-256-GCM in a directory outside the public website. The encryption key is kept in that private directory. This is server-side encryption, not end-to-end encryption; authorised hosting administrators can access the key and data.
Each operation checks the individual account and access period. Invitations are stored as password hashes. Sessions use HTTP-only cookies, SameSite restrictions and Secure cookies on HTTPS. Save conflicts prevent one stale browser session from silently overwriting another.
AI runs process the current case
Selecting Prepare AI handoff sends the case code, programme, objective, visit entries and tasks to the configured AI provider. Saving a case alone does not run AI. Generated drafts require human review and can be incorrect.
The request asks the provider not to store an API response object. This is not a promise of zero retention across provider systems. Provider processing locations and retention terms apply separately and should be reviewed before activation.
Retention and deletion
Website enquiries are saved in a private inbox for up to 180 days, with cleanup on site activity. They are access-restricted files, not encrypted by the app. Saved cases remain until removed or a verified deletion request is processed. Access metadata remains for account administration.
Temporary AI retry results are cleaned after 24 hours through hourly checks on workspace traffic. Hosting backups follow the hosting provider’s retention cycle and may contain earlier versions. Downloads are under your control.
Report a concern
Use the security topic on the contact form. Describe the page and steps to reproduce, without including patient information, private keys, complete invitation codes or other users’ records.