Your patient data is protected at every step. Here's exactly how.
PHI never leaves the secure boundary. The LLM only sees de-identified tokens.
Google Cloud Data Loss Protection API detects and classifies PHI (names, SSNs, DOBs, phones, emails, addresses) with enterprise-grade accuracy.
PHI is replaced with deterministic crypto-hash tokens. Token maps are stored separately and auto-purged after 72 hours.
Every organization's data is physically separated in Firestore. Cross-tenant access is blocked at the database rule level.
MFA is required for all users. Firebase Auth enforces authentication before any data access.
Business Associate Agreement executed with Google Cloud. Vertex AI model training is explicitly disabled.
Every PHI access, status change, and user action is logged with timestamps and IP addresses. Logs are immutable.
AI drafts appeals but never sends them. Every appeal must be reviewed and approved by a credentialed human reviewer.
All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Firebase and GCP handle encryption automatically.
Denial letter and clinical notes are uploaded. Data is encrypted in transit and at rest.
GCP DLP API detects all PHI. Each identifier is replaced with a deterministic token. Original values are stored in a separate token map.
Only de-identified text (with tokens) is sent to Vertex AI. The LLM never sees real patient data.
A credentialed reviewer edits and approves the draft. No auto-send.
Token map restores original PHI into the approved appeal. PDF is generated and downloaded.
Token maps are automatically deleted after 72 hours. Audit logs are retained for 7 years.
No. Vertex AI model training is explicitly disabled in our GCP project. Only de-identified data (with PHI replaced by tokens) ever reaches the LLM. Google's BAA confirms that customer data is not used for model training.
Only credentialed reviewers within your organization can see patient data. Access is controlled by Firestore security rules that enforce org-level isolation. Super admins can access all orgs within their tenant. All access is logged.
If DLP scrubbing fails, the system falls back to a local regex-based PHI matcher. If both fail, processing halts and the appeal status is set to "error." No raw PHI is ever sent to the LLM. An admin notification is triggered for manual review.
Token maps: Auto-purged after 72 hours.
Audit logs: Retained for 7 years (HIPAA requirement).
Appeals: Retained until deleted by an org admin.
Uploaded files: Retained until the associated appeal is deleted.
Yes. All data is encrypted at rest using AES-256 (managed by Google Cloud) and in transit using TLS 1.3. Firebase Auth tokens are signed and encrypted. No plaintext data is ever logged.
Need custom compliance configurations, dedicated support, or enterprise deployment? MEO Advisors provides hands-on implementation, white-label options, and ongoing compliance management for healthcare organizations of any size.