Redact before you paste

Mark the identifiers in a patient note before it goes near an AI tool, then score your redaction against HIPAA's 18 Safe Harbor identifiers.

Tap every underlined phrase in the chart that could identify the patient, and watch the AI chat box below fill with placeholders. Leave what the AI needs to help: the condition, the numbers, the treatment. Then switch on the check.

Example data. Rosa Delgado and every detail in her note are made up, including the phone numbers, IDs and addresses.

Identifiers removed

0 of 21

Still in the text

?

Turn on the check

Clinical details removed

?

The AI needs these to help

Patient chart

Visit note
Outpatient follow-up, diabetesDraft

(, born ) was seen on for a diabetes follow-up. She is a woman who lives at , , .

Phone , email . Records were faxed from . Health plan member ID , billing account .

Her daughter drives her to visits on a disabled parking permit for plate . Her father, who is , lives with them. She works part time at and holds a food handler license, .

, diagnosed in . Blood pressure , A1c , up from 7.2% in . Insulin pump serial . She logs readings at , last signed in from .

Plan: continue and recheck A1c in .

AI chat tool: what you would paste

Approved tools only
New chat

Turn this visit note into a short referral summary for a diabetes educator.

Rosa Delgado (MRN 00482913, born 03/14/1958) was seen on September 22, 2026 for a diabetes follow-up. She is a 68-year-old woman who lives at 1142 Oak Street, Dayton, Ohio 45402. Phone (937) 555-0148, email [email protected]. Records were faxed from (937) 555-0199. Health plan member ID HPX-7781-2290, billing account ACC-55120. Her daughter Maya drives her to visits on a disabled parking permit for plate GHT 2291. Her father, who is 94, lives with them. She works part time at Brightwater Bakery and holds a food handler license, FH-449102. Type 2 diabetes, diagnosed in 2015. Blood pressure 128/82, A1c 7.9%, up from 7.2% in March. Insulin pump serial SN 4471-AQ-09. She logs readings at portal.example.com/u/rdelgado, last signed in from 203.0.113.45. Plan: continue metformin 500 mg twice a day and recheck A1c in 3 months.

Nothing is sent: this lab runs in your browser.

HIPAA Safe Harbor: the 18 identifiers to remove

  1. ANames
  2. BGeographic subdivisions smaller than a state: street, city, county, ZIP code
  3. CAll elements of dates except the year, and ages over 89
  4. DTelephone numbers
  5. EFax numbers
  6. FEmail addresses
  7. GSocial Security numbers
  8. HMedical record numbers
  9. IHealth plan beneficiary numbers
  10. JAccount numbers
  11. KCertificate and license numbers
  12. LVehicle identifiers and serial numbers, including license plates
  13. MDevice identifiers and serial numbers
  14. NWeb addresses (URLs)
  15. OIP addresses
  16. PBiometric identifiers, including finger and voice prints
  17. QFull-face photos and any comparable images
  18. RAny other unique identifying number, characteristic or code

The list applies to the patient and to their relatives, employers and household members. Removing all 18 is one of two conditions: you also must not know of a way the rest could identify the person. Even then, paste only into AI tools your employer has approved. Sources: the regulation, 45 CFR 164.514(b)(2), and the HHS de-identification guidance.