A six-provider practice or a 900-person multi-site group: PrivacyPal is the HIPAA-aligned on-device governance layer between your staff and every AI tool they already want to use. Ambient note-taking, prior-auth drafting, ChatGPT, Claude, Copilot, Grok, Claude Code. PHI never leaves the device. No BAA-roulette. No clinician friction. No IT department required. Compliance, by construction.
Classical DLP catches "SSN: 123-45-6789." It misses "My 68-year-old patient with a recent MI who lives alone on Oak Street." PrivacyPal's models understand context: they swap identifiers in prose, not just in tagged fields.
18 HIPAA identifiers, fully supported. Plus facility names, provider NPIs, device serials, and the long tail of quasi-identifiers that re-enable reidentification.
Clinical context intact · zero PHI on the wire · mapping held on-device · no BAA with OpenAI
Let clinicians use Abridge, Nuance DAX or ChatGPT for note generation. PHI stays inside your Epic tenancy.
Draft appeals and submissions against payer policies. Member IDs and clinical history never hit an outside model.
Generate draft replies in MyChart-style inboxes. Names, diagnoses, and med lists are swapped on the way out.
Automate coding suggestions and denial analysis. Patient accounts, guarantor info, and DOBs stay protected.
Our clinicians were going to use AI either way. PrivacyPal made it a compliance story instead of a crisis.
Because PHI never reaches the LLM, you don't need a BAA with OpenAI, Anthropic or Google. Your existing covered-entity contracts already cover PrivacyPal: we sign a BAA, nobody downstream needs to.
Name, dates, MRN, NPI, IP, photos, biometric IDs: all detected in free text and swapped.
Every prompt, every swap, every model call: logged with user, patient context, and timestamp.
Annual audits. Penetration tests. Named security contact. The paperwork you need for risk review.
Max covers everyone who touches a chart: attach your domain, provision clinicians, front desk and billing centrally, and hold one PHI policy across every site. $30 per seat a month at 1 to 9 seats, $25 at 10, $21 at 100, billed annually. A single practitioner covering only themselves runs Pro at $7.50 a month. Health systems with a data-residency mandate run Cloud in their own VPC.