Produce the file — not the parts that were never yours to produce.
Medical records redaction software detects PHI, PII, other-patient identifiers, and privileged content automatically, then suggests each redaction for your approval — per item or per category — before anything is burned in. Approved redactions are applied to a logged, production-ready copy; nothing ships unreviewed, and the original record is never altered.
Suggest-then-approve: the AI proposes every redaction; a human reviewer approves it, per item or per category, before anything is burned in. Nothing ships unreviewed, and the original record is never altered.
Detection that reads like a reviewer, not a regex.
Names, SSNs, dates of birth, MRNs, addresses, and phone numbers are found in context — typed or handwritten, in headers, footers, and margins. Two categories generic tools miss are first-class here: pages that belong to a different patient, and content that looks privileged.
You approve — per item, per category, per audience.
Work through suggestions one by one, or approve a whole category at once when the pattern is clear. Build different redaction profiles from the same suggestions: the set opposing counsel receives is not the set your client receives, and each is approved and logged on its own.
A production copy with a paper trail.
Approved redactions are burned into a separate production set; the original stays intact and access-controlled. Every applied redaction is logged with its page, category, reason code, approver, and timestamp — so "what was withheld, and why" has a documented answer.
No automatic redaction ships unreviewed.
A missed identifier is a privacy incident; an over-redaction is a discovery fight. Both are human calls. That's why every suggestion is cited to its page, every approval is attributed, and the whole run lands in the audit trail — legally defensible because a person signed off on it.
See Audit Trail & Chain of CustodyFrom raw record to redacted production.
Three steps, with a human gate in the middle where it belongs.
Every page is read and scanned for PHI, PII, other-patient content, and privilege candidates — each detection cited to its page.
A reviewer works the suggestion queue — approving, rejecting, or escalating to counsel — per item or per category.
Approved redactions are burned into a production set with its log attached; the original stays intact and access-controlled.
Who prepares productions with it.
Anyone who has to hand a medical file to someone who shouldn't see all of it.
Exam files cleaned of other-patient pages before they reach the evaluator.
For IME orgsDiscovery productions redacted, logged, and defensible — privilege flagged for counsel.
For law firmsClaim files shared across parties with the right redaction profile per recipient.
For TPAsPHI minimization on outbound files, with a log that stands up in an audit.
For carriersMedical records redaction, answered.
No. Approved redactions are burned into a separate production copy; the original record is preserved untouched, page for page. You can always go back to the unredacted source, and the platform keeps the two clearly separated so the wrong version can't go out by accident.
Names, Social Security numbers, dates of birth, medical record numbers, addresses, phone numbers, and similar direct identifiers — plus two categories generic tools miss: content belonging to a different patient (co-mingled pages), and communications that look privileged. Every detection is a suggestion with a category and location, not an applied redaction.
Yes. A production for opposing counsel, a copy for your client, and an internal working copy can each carry a different approved redaction set — built from the same suggestions, approved separately, and logged separately. One source record, several defensible outputs.
Every applied redaction, with its page location, category, reason code, who approved it, and when. Rejected suggestions are logged too. If you're later asked to justify what was withheld and why, the log is the answer — exportable alongside the production set.
Pages and passages that look like attorney-client communications or work product are flagged as a distinct category for counsel to review — flagged, never auto-redacted. Privilege calls are legal judgments, so the platform surfaces the candidates and a human makes the call.
Related capabilities.
Redaction sits between organizing the file and producing it — these are its neighbors.
Sequential numbers and legends on the same production pass.
ExploreWrong-patient pages quarantined before analysis or production.
ExploreAn immutable log of every access, edit, and export on the file.
ExploreRule-based sorting and packet assembly ahead of production.
ExploreProduce a redacted set you can defend.
Upload a file and see the suggested redactions, the review queue, and the log — before anything is burned in. Handled under our BAA; never used to train a model.