Solutions · Healthcare

Did patient data reach the model?

Not as raw values. Raidu checks each call before it reaches the model and replaces personal health information with coded stand-ins such as PERSON_1. The model answers without seeing the raw value, and the decision is recorded and written once, covered for HIPAA’s six-year documentation rule.

Runs inside your AWS, GCP or Kubernetes install.

Last reviewed

Illustrative. No customer data.

The difference

Their way, and ours.

Their wayRaidu
Hope the clinician did not paste the chart note.Replace PHI with coded stand-ins before the model sees the prompt.
Log the call after the model has already seen the values.Intercept before the model is called. The log is the proof.
Six years of documentation assembled by hand before the audit.Write-once records from the first call. Ten-year retention.

A clinician pastes a discharge note. Raidu detects PHI as it is typed. On send, the model receives coded stand-ins only. The decision is recorded, written once.

Source: Tower personal-data detection and pre-send checkpoint

What compliance asks

And the record that answers it.

Did PHI reach the model?

Not as raw values. Raidu detects personal health information in the prompt and replaces it with coded stand-ins before the model sees the prompt. The model receives the coded stand-ins, not the raw values. Every substitution is logged and on record.

Can you show six years of AI call documentation?

Yes. Every call produces a write-once record, kept for ten years. HIPAA’s six-year documentation rule is covered with margin. No manual export, no reconstruction before the audit.

The product

See the screens.

Product windows from the films, with sample data. No customer data.

The record

The PHI decision, on the record.

Every call that touches personal health information produces a tamper-evident record: what was detected, what was replaced, and what the model received.

Entry 4,186 Pre-send checkpoint · 14:02:11Z
Input
Discharge note · record number and date of birth present
PHI detected
Personal data flagged
Action
Replaced with coded stand-ins
Model received
Coded stand-ins only. No raw values.
Proof
Tamper-evident, on record
sha256 129155a6e54f8e5428c5d9452cebf4b1…
entry 4,186 of 14,391 · write-once

The call path

Where PHI is stopped.

  1. InterceptEvery console and application call
  2. Detect79 personal-data and credential types checked, including PHI
  3. ReplaceCoded stand-ins substituted before the model sees them
  4. CallModel receives coded stand-ins only, never raw values
  5. ProveWrite-once record, linked so any change shows

Also covered

  • PHI detection
  • Coded stand-ins
  • Write-once audit
  • HIPAA documentation
  • Runs in your cloud

Common questions

Answered straight.

What is a coded stand-in?
A label that stands in for a personal value, numbered so the context survives: a person becomes PERSON_1 and their record number MRN_1 everywhere in the conversation. The model can still follow who did what, but it does not receive the raw value.
Which PHI types does Raidu detect?
Raidu detects 79 personal-data and credential types, covering the identifier, date, and contact categories most commonly found in clinical text.
How long are records kept?
Records are write-once and kept for ten years. HIPAA’s six-year documentation rule is covered with margin. No manual export is required before an audit.
Does Raidu run inside our own infrastructure?
Yes. Raidu runs inside your AWS, GCP, or Kubernetes install.
What counts as authorization for a model call?
Every call is checked against your policy before the model is called. Calls that carry PHI and lack the policy authorization to proceed are stopped. The refusal is logged and on record like any other decision.

Patient data stays with you. The proof does too.