What it found and masked
This does not make any AI tool HIPAA-compliant, and it does not certify de-identification. It is a first pass that catches the mechanical identifiers. Safe Harbor also requires that you have no actual knowledge the remaining information could identify the person, and a rare presentation plus a small catchment area can identify someone with every field above removed. Read the output back as a stranger would. If someone who knows this patient could recognize them, strip more or don't use the case at all.
And none of this grants permission. Your organization's policy and your vendor's contract decide whether you may use a tool at all.
Want the printable version?
The 18 identifiers and the five-step protocol as a one-page PDF you can pin above your workstation, plus two of the eight EHR phrase templates to try. Free, no purchase.
The printable pocket card version of this checklist is on the free protocols page, together with the 47 documentation failure modes and the six named Attending Standard protocols.
There is deliberately no email box on this page. It would be a form post, and this page promises it makes no call of any kind. The tool stays free and ungated either way.
This is one page of the system
The Attending is a workflow system for the administrative half of medicine, 8 EHR-ready phrase templates, 100 clinical prompts each marked GREEN / AMBER / RED for patient data, seven complete workflows, and the full Safe Harbor protocol. One payment. No subscription.
The 18 identifiers
| Detected automatically | You must check by hand |
|---|---|
| Names (title-prefixed), dates, ages over 89, phone, fax, email, SSN, MRN, account and health-plan numbers, license and certificate numbers, vehicle and device serials, URLs, IP addresses, ZIP and street address | Biometric identifiers, full-face photographs, employer or facility names not preceded by a title, relationship descriptors, and any other unique characteristic or code, including a rare diagnosis in a small population |