SOLUTION · COMPLIANCE

HIPAA-Relevant PHI Detection

Patient records, diagnoses and insurance data shouldn't go into an AI prompt or log file unmasked. PrivoNest detects the identifier types HIPAA treats as sensitive, before they reach a model.

Start Free Ask About a BAA

Sample HIPAA masking flow PHI-aware

Patient record

→

PrivoNest Engine

→

AI-ready output

Patient records, masked before they reach a model

Before masking

Patient John Carter, DOB 1985-07-12, MRN 00847213, diagnosed with Type 2 Diabetes (ICD-10 E11.9), insurance ID BXA-55210, prescribed Metformin 500mg.

After masking

Patient <PER>, DOB <DATE>, MRN <ID>, diagnosed with <DIAGNOSIS> (<ICD10>), insurance ID <ID>, prescribed <PRESCRIPTION>.

HIPAA-Relevant Identifiers the Engine Detects

Medical Record Numbers

Dedicated recognizer for medical record identifiers, separate from generic account numbers.

Insurance / Health Plan IDs

Insurance ID and multilingual health-ID recognizers cover common health-plan beneficiary formats.

Diagnosis & Codes

Diagnosis text, ICD-10 codes and CPT procedure codes are recognized as distinct categories.

Prescriptions & Admission Data

Prescription references, hospital admission and discharge dates each have their own recognizer.

Blood Type & Contextual Health Data

Blood type and other contextual health fields are covered alongside DOB and demographic identifiers.

Standard Identifiers

Name (via NER), email, phone, SSN, address and device/IP identifiers — the non-clinical identifiers HIPAA also counts as PHI when linked to health data.

HIPAA Capability Checklist

Capability	PrivoNest	AWS Comprehend Medical	Generic / DIY regex
Detects MRNs, ICD-10/CPT codes, insurance IDs	✓ Yes	! Clinical NLP, separate service	! Only if you build it
Reversible tokenization	✓ PV1 tokens	✕ Not built in	✕ You build it
Self-serve pricing, no sales call	✓ Free tier + $9/50k	! Pay-per-call, AWS setup	✓ Free software
Free integration support	✓ 24h response target	! Paid support tiers	✕ Self-support only
BAA available	✓ On request	✓ Yes (HIPAA-eligible services)	✕ N/A — internal only

FAQ

HIPAA Questions

Can we get a BAA?＋

Yes — a Business Associate Agreement can be arranged on request. Contact us before sending real patient data through the API so we can get that in place first.

Does PrivoNest use customer data to train AI models?＋

No. Patient data sent to PrivoNest is processed only to detect, mask, tokenize and — when authorized — restore identifiers. It is not used to train any AI or detection model, and it is not sold or reused for any other purpose.

Can I test it with synthetic/sample patient data first?＋

Yes — that's the recommended way to evaluate detection quality before moving to a production, BAA-covered workflow.

Do you help healthcare teams integrate this?＋

Yes — free integration support, with a target first response inside 24 hours. Contact us once you have an API key.