Why in-house matters
Every extra party that touches patient data is another place it can leak. By de-identifying with our own models, we shrink that surface to one: us. There is no third-party processor holding raw PHI, and no data leaving to be cleaned elsewhere.
Detect
Sandy scans every record for the eighteen HIPAA identifiers: names, dates, contact details, account and member numbers, and free-text mentions in notes.
Strip
Identifiers are removed or masked before the data is used to improve the product. Clinical meaning stays; the person behind it does not.
Verify
A second pass checks that nothing slipped through, including PHI hidden inside dictated notes, so only de-identified data moves forward.
De-identification protects the patient, not just the practice. It is one of the four pillars of how Sandy is built.
Back to Security