Share medical records without sharing PHI

Release-of-information requests

An attorney letter asks for treatment records; the request covers care, not identity of every other party in the file. Upload the chart, let the engine flag MRNs, member IDs, guarantor details, and third-party names across typed and handwritten pages, approve each detection, and send the release with its audit certificate attached.

Payer and compliance audits

Auditors need clinical substance — diagnoses, procedures, dates of service — not patient identity. Because the redacted output stays text-searchable, the auditor can still work the file like a document instead of a stack of photographs, and the certificate documents exactly what was withheld from the copy.

QA reviews and staff training

Real cases make the best morbidity reviews and onboarding material, but only after the patient is unidentifiable. A review-first pass over the chart replaces the highlighter-and-hope approach, and the destroyed original means the training copy is the only copy.

Does Dr. Redact sign a Business Associate Agreement?

Yes. A BAA is available on every paid plan and is executed electronically — it's the gate that PHI processing sits behind, not an enterprise-tier add-on.

Can it handle scanned charts and handwriting?

Yes. Image-based pages are OCR'd automatically, and handwritten identifiers — names, dates of birth, signatures — are detected and queued for your review like any typed item.

Is the patient information recoverable after redaction?

No. Approved items are removed at the pixel level and the original file is destroyed at processing. There is no layer under the bar to copy, and the audit certificate records every removal.