Your customers' privacy stays in your office. Period.
We de-identify your data on-site using the HIPAA Safe Harbor method, so what gets licensed is no longer personal or protected health information.
Only de-identified data ever leaves your office.
Your systems feed an offline Clean Source device at your location. Identifiers are removed and checked, you approve the result, and only the clean dataset leaves. Raw records, and the drive they were copied to, stay on the premises.
A federal checklist, applied to every client.
HIPAA (45 CFR §164.514(b)(2)) gives two ways to de-identify health data. Safe Harbor is the checklist method: remove 18 specific identifiers and have no actual knowledge that what remains could identify someone. Data that meets it is no longer protected health information.
It's the strictest common standard, so we apply it to every business we work with, in healthcare or not.
The 18 identifiers we remove
- Names
- Geographic detail smaller than a state
- All dates except the year
- Phone numbers
- Fax numbers
- Email addresses
- Social Security numbers
- Medical record numbers
- Health plan beneficiary numbers
- Account numbers
- License and certificate numbers
- Vehicle identifiers and plates
- Device identifiers and serial numbers
- Web URLs
- IP addresses
- Biometric identifiers
- Full-face photos and comparable images
- Any other unique identifying number or code
Built so there's nothing to leak.
Offline device
No internet connection during processing.
Business Associate Agreement
Signed before we touch anything, for HIPAA-covered clients.
Encrypted, then wiped
Working drives are encrypted and wiped after each engagement.
You approve the output
Review a sample of the clean data before anything is released.
Written summary
A de-identification summary for your records.
Images and files too
Scans and images can carry names and dates in metadata or in the image itself. We scrub both.
We clean it. Then the buyer checks it again.
Many brokers send data to the AI company and let the buyer handle de-identification. With us, your data is de-identified inside your office first, and every buyer then runs its own independent privacy review before accepting it.
The same protection for every business.
The same on-site process removes customer names, contact details, account numbers and other personal information from CRM, call, email and dispatch data, in line with state privacy laws such as the CCPA.
Typical broker
A buyer's engineer is given access to your systems to anonymize and extract the data.
Clean Source Data
Buyers never touch your systems or your raw data. Ever.
Read the details, or share them with your IT person.
Want to see how it would work in your office?
Book a short privacy walkthrough. We'll answer every question before anything happens.