SECURITY / DE-IDENTIFICATION

De-identification, done in-house.

Most AI vendors send your data to someone else to be cleaned. Sandy does not. We strip PHI with our own models, before data is ever used, so patient identity never leaves our control.

CPT 99214$892.50
CPT 97110$310.00
CPT G0439$148.00
CPT 97140$185.00
CPT 80053$96.00
CPT 99203$300.00
CPT 93000$84.00
CPT 97535$142.00
CPT 99214$892.50
CPT 97110$310.00
CPT G0439$148.00
CPT 97140$185.00
CPT 80053$96.00
CPT 99203$300.00
CPT 93000$84.00
CPT 97535$142.00

Why in-house matters

Every extra party that touches patient data is another place it can leak. By de-identifying with our own models, we shrink that surface to one: us. There is no third-party processor holding raw PHI, and no data leaving to be cleaned elsewhere.

01

Detect

Sandy scans every record for the eighteen HIPAA identifiers: names, dates, contact details, account and member numbers, and free-text mentions in notes.

02

Strip

Identifiers are removed or masked before the data is used to improve the product. Clinical meaning stays; the person behind it does not.

03

Verify

A second pass checks that nothing slipped through, including PHI hidden inside dictated notes, so only de-identified data moves forward.

De-identification protects the patient, not just the practice. It is one of the four pillars of how Sandy is built.

Back to Security