Privacy and security
You are the trustee of your patients' health information. This page says what happens to your notes during an audit, in the order it happens. It describes the service as it runs today.
What happens to a note
Your clinic removes names and health numbers first
We work only with de-identified notes. Your clinic removes names and health numbers on its own system before any note is analysed. We help you do it.
Each note is checked again
Free text can still hold details that point to a patient. Software checks each de-identified note again. It looks for:
- names
- health numbers and registration numbers
- dates of birth
- street addresses and postal codes
- phone numbers
A note that fails is held back until it is fixed. This check is part of the review.
Software reads the note
The de-identified note text is sent to Anthropic for analysis by its Claude language model. It goes through Anthropic's paid API, under commercial terms. Under those terms, Anthropic does not use the inputs to train its models.
Anthropic processes the note text in data centres in the United States.
Rules in code prepare the claims
The tariff code and the fee come from the fee schedule in our own code, not from the language model.
You confirm
Nothing is submitted without your confirmation. We do not submit claims, and we do not connect to your EMR.
Storage
Notes and audit results are kept on your clinic's system.
Only the de-identified note text leaves your clinic, and only to be read by the language model. Results come back to your clinic's system.
What we ask of you
Questions
Ask us anything about how notes are handled before the audit starts. Write to our privacy officer at legal@unbilled.ca.
This page covers clinical notes. The website privacy policy covers the details you send through the booking form.
Book an audit
The first audit is free. It covers three months of notes for one doctor. Tell us how to reach you and we will reply within one business day.